General
- Target Hi_Kitty_2.exe
- Size 157KB
- Sample260615-vkdexafx9n
- SHA256 501487b025f25ddf1ca32deb57a2b4db43ccf6635c1edc74b9cff54ce0e5bcfe
Score
10/10
Malware Config
Targets
-
- Target Hi_Kitty_2.exe
- Size 157KB
- SHA256 501487b025f25ddf1ca32deb57a2b4db43ccf6635c1edc74b9cff54ce0e5bcfe
Score10/10Family: HelloKitty Ransomware
Ransomware family which has been active since late 2020, and in early 2021 a variant compromised the CDProjektRed game studio.
Renames multiple (141) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.