Resubmissions

05/02/2025, 08:55

250205-kvkxmayrcz10

05/02/2025, 06:37

250205-hdsvsswldm10

17/03/2024, 04:49

240317-ffz1saef6510

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/03/2024, 04:49

General

  • Target
    ransomwares/InfinityCrypt/InfinityCrypt.exe
  • Size 211KB
  • Sample240317-ffz1saef65
  • SHA256 f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • InfinityLock Ransomware

    Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

  • Drops file in Program Files directory 64 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ransomwares\InfinityCrypt\InfinityCrypt.exe
    "C:\Users\Admin\AppData\Local\Temp\ransomwares\InfinityCrypt\InfinityCrypt.exe"
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:1528

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        icudtl.dat.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 16B
        • SHA256 3d387b7eab5c7e77f81eb83a60b04127b068d077aed7e8d1054f89ba0efa2ff3
        • MD5 SHA1 SHA512

        s_remove_18.svg.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 720B
        • SHA256 30c09244a2e621754b636b534c4f7a470a1ab30513c2b0f408b6f09760507205
        • MD5 SHA1 SHA512

        example_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 688B
        • SHA256 02649d52f13cefb52d280df4a5429280f38770c2b9d9375a5ada9721a5a30e5a
        • MD5 SHA1 SHA512

        example_icons2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 1KB
        • SHA256 a531e8452109d72ed248b250cb4040ba18e976999d76f08b5e91bab966a5f516
        • MD5 SHA1 SHA512

        rhp_world_icon.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 448B
        • SHA256 f30ab85bc630819537e1a9057e1e78283b83d07b478a561d26e2ff938e4c544d
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 624B
        • SHA256 7664602117c62f123a03df1d2874cdceb76c45bba620d3af6916776f48c0aaba
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 400B
        • SHA256 150f6e92deeac937868850e6c7bd9c56508509c739add00c4a64f1dc0d7428ac
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 560B
        • SHA256 3242fc854bcdbb9ebafac9beeb1a01c199b6617c2231c5db96a46517c792c49b
        • MD5 SHA1 SHA512

        rhp_world_icon.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 400B
        • SHA256 51e0df23da7a8de251fa616f2bcf386f86501950408480143da13f85c260974f
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 560B
        • SHA256 b8b3f76af22ebe2c0fc5a51a3f6d9019a76717098f7d68fc68221d819f48eca0
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 400B
        • SHA256 3ababfc78ab6fa8dd09369c93a1766db76c720ca898b70fd54753c9d3697ab85
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 560B
        • SHA256 0a430266e0af2b5e157f1090a581b2f646339def9b7f9b31534931da030af93e
        • MD5 SHA1 SHA512

        icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 7KB
        • SHA256 05414a5aa828ee2323d3ef1efe42b1ab3f9c9359f8952beb78d1445dcc81f354
        • MD5 SHA1 SHA512 SSDEEP

        icons_ie8.gif.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 7KB
        • SHA256 ce89f91c30359ced719909612fae9929ea483a52daa57831a22206f8da39dc27
        • MD5 SHA1 SHA512 SSDEEP

        icons_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 15KB
        • SHA256 10fc538964115e1b06f9270050fc11b393ce3bd82916c74d8f2822347bd46530
        • MD5 SHA1 SHA512 SSDEEP

        new_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 8KB
        • SHA256 53217f5a05737dc0ba042ffeeebc233634e863dc259671ca21256ff13e7b905a
        • MD5 SHA1 SHA512 SSDEEP

        new_icons_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 17KB
        • SHA256 c7fc79dfad3970643682c14dcad91658c2fe80974dc158ddb8a9509567971341
        • MD5 SHA1 SHA512 SSDEEP

        bg_pattern_RHP.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 192B
        • SHA256 77e2e6acd031c8c59c075437fa34bbc1a16e243d9bd7f691181809b0c8e9feeb
        • MD5 SHA1 SHA512

        bg_patterns_header.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 704B
        • SHA256 d857b1b72be72f8394f2690fe47499222c7df3ba2e3bb1a56818cf2981dc829f
        • MD5 SHA1 SHA512

        illustrations.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 8KB
        • SHA256 7f9e8f8d77d4ef48e7d47854fe2182688ffce9262b2d6df52e85c608f80e0d21
        • MD5 SHA1 SHA512 SSDEEP

        illustrations_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 19KB
        • SHA256 84376df03c2033fb3da56d70060fe3d9de5d2b7e9c042381efcebe029f977f8f
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 832B
        • SHA256 b22cd19ab5e2ed451435f86b54cd8711fa48cecce4e598282869d75d6e0a90ca
        • MD5 SHA1 SHA512

        ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 1KB
        • SHA256 1b2f1b488bc9c45323fa60e23678aba7bf405b95b2bc642aa25e70a6851589cd
        • MD5 SHA1 SHA512

        ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 1KB
        • SHA256 db8033a8d7cd059f66a05f73ec5c86fdbd0500ccb4283b3cfb2e41afa3d7ad88
        • MD5 SHA1 SHA512

        main.css.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 816B
        • SHA256 09ba3ac24df07895b976baeb252245f3534fcca0f91c63cb0bddc11a4fd3478a
        • MD5 SHA1 SHA512

        bun.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 2KB
        • SHA256 7b55388d0d288caab46c331ca410622f783e40dce49ac88a1417528766ae3e41
        • MD5 SHA1 SHA512

        cstm_brand_preview.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 2KB
        • SHA256 19acd386b312b1a9e4f1614ed5f2223e0f37606caac32de6ada3e839d7a9f468
        • MD5 SHA1 SHA512

        cstm_brand_preview2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 4KB
        • SHA256 779b7d0be12e4a5125c4ce8ba2228f05912187410b63f9aa7dffd2051a55b3ce
        • MD5 SHA1 SHA512 SSDEEP

        dd_arrow_small.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 304B
        • SHA256 4be82d8b866ea8ef06521cff5cb09aa2e5b097095248fe327cb22b71452dc0b1
        • MD5 SHA1 SHA512

        dd_arrow_small2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 400B
        • SHA256 480276b72da22fae5bc2555870e6016497e7f03db95ba285415c9772479af2f2
        • MD5 SHA1 SHA512

        nub.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 1008B
        • SHA256 fc40dd132ab8eea48246e5b012137bc8987e8081edde0bbdc5784a1301996d2d
        • MD5 SHA1 SHA512

        share_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 1KB
        • SHA256 6f49be70f4f69cb18b55c2879c808004a5af1a9792f84b3eb959d59f4ae19f99
        • MD5 SHA1 SHA512

        share_icons2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 2KB
        • SHA256 e0a6c87a68f0c3a6692b188e82b0bd6415a1e49d823a629657f7ecfbf03feda2
        • MD5 SHA1 SHA512

        ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 848B
        • SHA256 93fd0ca30a31ad2bbabd224ea0a844bc473aa9a5d0b5ea08fdd24fb0bd664eaa
        • MD5 SHA1 SHA512

        DisplayLanguageNames.en_US_POSIX.txt.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.31294945C0BA0A33C821638BB515507513D88A49FD9515C7473EEA82EC6BB17E
        • Size 32KB
        • SHA256 9c16bde3af29c880718e9dbf03fafc4434ba4eecfe7620fcdda1b26283750e10
        • MD5 SHA1 SHA512 SSDEEP

        memory/1528-4-0x0000000005770000-0x0000000005802000-memory.dmp

        memory/1528-1-0x0000000075070000-0x0000000075820000-memory.dmp

        memory/1528-5-0x0000000005650000-0x0000000005660000-memory.dmp

        memory/1528-6-0x00000000056B0000-0x00000000056BA000-memory.dmp

        memory/1528-7-0x0000000005960000-0x00000000059B6000-memory.dmp

        memory/1528-3-0x0000000005D20000-0x00000000062C4000-memory.dmp

        memory/1528-2-0x00000000056D0000-0x000000000576C000-memory.dmp

        memory/1528-0-0x0000000000C90000-0x0000000000CCC000-memory.dmp

        memory/1528-2735-0x0000000075070000-0x0000000075820000-memory.dmp

        memory/1528-2738-0x0000000005650000-0x0000000005660000-memory.dmp

        memory/1528-3433-0x0000000006CC0000-0x0000000006D26000-memory.dmp

        memory/1528-3434-0x0000000005650000-0x0000000005660000-memory.dmp

        memory/1528-3435-0x0000000005650000-0x0000000005660000-memory.dmp