Resubmissions

07/01/2024, 02:01

240107-cftl8acccn10

07/01/2024, 01:59

240107-cedjlsdfd94

Analysis

  • max time kernel
    1684s
  • max time network
    1154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/01/2024, 02:01

General

  • Target
    [email protected]
  • Size 211KB
  • Sample240107-cftl8acccn
  • SHA256 f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • InfinityLock Ransomware

    Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

  • Drops file in Program Files directory 64 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\[email protected]
    "C:\Users\Admin\AppData\Local\Temp\[email protected]"
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:4920

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        icudtl.dat.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 16B
        • SHA256 ba653b2e4072eba236fd7a8891dd8a3f61460f44d63326c4be35c671bee40dd8
        • MD5 SHA1 SHA512

        s_remove_18.svg.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 720B
        • SHA256 60b6b46e8d63d114bdaaffbca87abf1c44c0a32ff63ca849138f5ab91692cce4
        • MD5 SHA1 SHA512

        example_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 688B
        • SHA256 a87e86df4e46e97a3991597202b79756c0a51e00c52480b1d06d465819f19b04
        • MD5 SHA1 SHA512

        example_icons2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1KB
        • SHA256 043cda306cd41b6d3d965a892d8c0b3df6856473563fa57dd5f83e0893037ce2
        • MD5 SHA1 SHA512

        rhp_world_icon.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 448B
        • SHA256 7f1bcc58afed4d73ba0f2091e2cfe3dd08bb9a0497364f7077b8631937523374
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 624B
        • SHA256 61ccfcc927407ea7303c02be432f1c23361feb8f644a66ea6473aa47cdc220ee
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 400B
        • SHA256 7a229a6003abed1de3fca33c868cd0bbe3dafdac7ec0d20198db9cb276af1c77
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 560B
        • SHA256 63f489ce9bc6a97dac22f4a1d389f6b8692d565d08f212d31bcd656a959494dd
        • MD5 SHA1 SHA512

        rhp_world_icon.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 400B
        • SHA256 31ee122f5e85ae422693c4457eae88609c29c7a46a814bf6fd1af9284d5da8e7
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 560B
        • SHA256 b765233d2242a60cbe69c0bf152adb7223883956a42317b509b08024bf7845af
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 400B
        • SHA256 57178a30a4b122abc7b437c3eaad7e9a052c3c1544c86c49971b5e007c0a2252
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 560B
        • SHA256 d01644b8a9813a94c57d0b2f755972b560bb881d0f0136da096fb6a40fcba146
        • MD5 SHA1 SHA512

        icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 7KB
        • SHA256 b38f7566973572d5a175f179309a0935f6db2f8ed235f1926cf05f80a6a10f24
        • MD5 SHA1 SHA512 SSDEEP

        icons_ie8.gif.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 7KB
        • SHA256 39b69243a73637c676e2e0cac2ffe25ca5a8bafffd9df8fd8774679280513875
        • MD5 SHA1 SHA512 SSDEEP

        icons_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 15KB
        • SHA256 599f429e0b4bfc1252a1a0160890277767b6b462b70737657977159088c05135
        • MD5 SHA1 SHA512 SSDEEP

        new_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 8KB
        • SHA256 c12dbdc1e9a2c2291ba169c1baf85f5ee2ad3499a4c503a66662a3b2974f3e15
        • MD5 SHA1 SHA512 SSDEEP

        new_icons_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 17KB
        • SHA256 8377e82ae132952a3f88f2838ce68be68c5172f5bf0bacefd07494417abce294
        • MD5 SHA1 SHA512 SSDEEP

        bg_pattern_RHP.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 192B
        • SHA256 cb33388990ac8765b0e15b742a5bd468929003b9fd5271dbd59310ac3da960f9
        • MD5 SHA1 SHA512

        bg_patterns_header.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 704B
        • SHA256 e896442d7ea6a0407c09432ff95a2eec1f89c2ca81b2d0eb054f1eb6388d1fc4
        • MD5 SHA1 SHA512

        illustrations.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 8KB
        • SHA256 dd909e9b5b4f5930ee75eb6293f7ca552d29c7e566ac2bee5200ca3e0569e9ac
        • MD5 SHA1 SHA512 SSDEEP

        illustrations_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 19KB
        • SHA256 33e78a1eaa458f4c52a2e26767a2d721b00aa0497e230273fec49c62c62da078
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 832B
        • SHA256 281a79c7721edf576baa4f1969b3f6bd3cbd9b3a292cb7cf92690255e07ced29
        • MD5 SHA1 SHA512

        ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1KB
        • SHA256 c1f0bbebe1ee90ade0d76212ff91b9a9c85349e53628c1b029365c7796e29ca4
        • MD5 SHA1 SHA512

        ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1KB
        • SHA256 c7bd599ce66873a65db113246aff5142cc1a753b8a93ad6c25c8ae7fda00fc98
        • MD5 SHA1 SHA512

        main.css.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 816B
        • SHA256 f0afb773325ca89afd724f9b6ce88617504969a544ab99d98aa5f2add3a15e77
        • MD5 SHA1 SHA512

        cstm_brand_preview.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1KB
        • SHA256 7a30cbd21cc196b9ab745d53408cd0aeed884ed13d765d6cfdd056f0deadd23a
        • MD5 SHA1 SHA512

        cstm_brand_preview2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 4KB
        • SHA256 a87e8b215bdfba9327c5ff0ae55e9a1b3ab91e42819e6740b023bfe8a0ad6b4a
        • MD5 SHA1 SHA512 SSDEEP

        dd_arrow_small.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 304B
        • SHA256 2e062786babefc46fd1827457427eb5ec10be1e498cf059b0a7e6999d8f95331
        • MD5 SHA1 SHA512

        dd_arrow_small2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 400B
        • SHA256 e00b0f9e0fe16ceed09d77739550070fd4fc23f1e8940e503817803d4d541bd1
        • MD5 SHA1 SHA512

        nub.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1008B
        • SHA256 3ad9a984630a18b1763ee533cd5f9935ffe6fc6a5f8b90ccdcdee2db3d35b15c
        • MD5 SHA1 SHA512

        share_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 1KB
        • SHA256 85d90f7eb86c7ebaec0e42f19d98701d944dabdb48fbb232861aa077d702c568
        • MD5 SHA1 SHA512

        share_icons2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 2KB
        • SHA256 c9d558106206a23468e4c90edb88cb59c726aaf47c6da64311c3915b19401dfe
        • MD5 SHA1 SHA512

        ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 848B
        • SHA256 dc599b9b32b5f4f408423f22af21d33b2b091499d71a08f92d9d3e65d6a19a09
        • MD5 SHA1 SHA512

        DisplayLanguageNames.en_US_POSIX.txt.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.9FD55A0A544B184E5A79F17172DF17681B450D30EC5649D432F0CC0AFAB6CAE6
        • Size 32KB
        • SHA256 ebd46c8ccc5b3ffcfb22d69355c5728b5a9eb3ec47dd06649f8bee99241a5584
        • MD5 SHA1 SHA512 SSDEEP

        memory/4920-3-0x0000000005EA0000-0x0000000006444000-memory.dmp

        memory/4920-0-0x0000000000EA0000-0x0000000000EDC000-memory.dmp

        memory/4920-4-0x0000000005990000-0x0000000005A22000-memory.dmp

        memory/4920-204-0x0000000005B70000-0x0000000005B80000-memory.dmp

        memory/4920-5-0x0000000005B70000-0x0000000005B80000-memory.dmp

        memory/4920-6-0x0000000005970000-0x000000000597A000-memory.dmp

        memory/4920-7-0x0000000005BE0000-0x0000000005C36000-memory.dmp

        memory/4920-2-0x0000000005850000-0x00000000058EC000-memory.dmp

        memory/4920-203-0x0000000074A70000-0x0000000075220000-memory.dmp

        memory/4920-1-0x0000000074A70000-0x0000000075220000-memory.dmp

        memory/4920-3428-0x0000000001690000-0x00000000016F6000-memory.dmp

        memory/4920-3429-0x0000000005B70000-0x0000000005B80000-memory.dmp

        memory/4920-3430-0x0000000005B70000-0x0000000005B80000-memory.dmp