infinitylock | 5f158673c75d304ae052d779ffc0a296618b0b0d419c94ac2b013035ee87b5ad | Triage

Sharing

General

Target

hydrogen method.zip
Size

34KB
Sample

241103-vwjq3aymhy
MD5

a67a1a1383e2ccf2b846a22fb224bf3f
SHA1

a33bce1719a50da335e35f0e6157250614a4b221
SHA256

5f158673c75d304ae052d779ffc0a296618b0b0d419c94ac2b013035ee87b5ad
SHA512

f5288217db0892697b5a2bec8c7a7a18fbeb45da61d71dbd6fd6f213a54c1d30063c2cfde68f7b12cf04029570a70fda2917834fb2c8fd7cb6f412b6d918e3bd
SSDEEP

768:kUOmWLLSyLDu8OKjBB8m3KCC1scx03R67d/uFe/aHz3GRUc76VQY:umRma8OKjBBTk1f0B0umaHiREVB

Score

10^/10

infinitylock discovery ransomware

Malware Config

Targets

- Target
  
  hydrogen method.exe
- Size
  
  211KB
- MD5
  
  b805db8f6a84475ef76b795b0d1ed6ae
- SHA1
  
  7711cb4873e58b7adcf2a2b047b090e78d10c75b
- SHA256
  
  f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
- SHA512
  
  62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
- SSDEEP
  
  1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Score

10^/10

infinitylock discovery ransomware
- InfinityLock Ransomware
  Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
  ransomware infinitylock
- Infinitylock family
  infinitylock
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

infinitylockdiscoveryransomware

behavioral2

infinitylockdiscoveryransomware