General
- Target Hi_Kitty_2.exe
- Size 157KB
- Sample260615-vkdexafx9n
- SHA256 501487b025f25ddf1ca32deb57a2b4db43ccf6635c1edc74b9cff54ce0e5bcfe
Score
10/10
Malware Config
Targets
-
- Target Hi_Kitty_2.exe
- Size 157KB
- SHA256 501487b025f25ddf1ca32deb57a2b4db43ccf6635c1edc74b9cff54ce0e5bcfe
Score10/10-
Family: HelloKitty Ransomware
Ransomware family which has been active since late 2020, and in early 2021 a variant compromised the CDProjektRed game studio.
-
Renames multiple (141) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.