General

  • Target

    https://github.com/Endermanch/MalwareDatabase/raw/master/ransomwares/InfinityCrypt.zip

  • Sample

    230630-fq82fagb62

Malware Config

Targets

    • Target

      https://github.com/Endermanch/MalwareDatabase/raw/master/ransomwares/InfinityCrypt.zip

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Command and Control

Web Service

1
T1102

Tasks