hellokitty | [.]incoming_72310e31280b7e90

General

Target
.incoming_72310e31280b7e90
Size 91KB
Sample260623-p9r2psc16x
SHA256 72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462
MD5 89d397164f57d3d0731c7c577b8e5be4
SHA1 40ceb71d12954a5e986737831b70ac669e8b439e
SHA512 2adb7e1c19116be127ff0d4198e6ca970785c81ba2e136c15b245f878f6018bafda819170aff49f26abfac619642f21566e7260468c8080fb07bf3bdaad7686f
SSDEEP 1536:y8Hsin072FL6jTAebMX+A5V6xTf5Qt46:y7h3TDbMXDkj
TLSH
T1BD936A8DF5F2247DD756C530CD8B29B23621368886B0AE7F2785D53C3E2224A1F2DDA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: HelloKitty Ransomware
Ransomware family which has been active since late 2020, and in early 2021 a variant compromised the CDProjektRed game studio.
ransomware hellokitty

HelloKitty ELF 1 IoCs

resource	yara_rule
sample	family_hellokitty_elf

SHA256 72310e31280b7e90ebc9a32cb33674060a3587663c0334daef76c2ae2cc2a462
MD5 89d397164f57d3d0731c7c577b8e5be4
SHA1 40ceb71d12954a5e986737831b70ac669e8b439e
SHA512 2adb7e1c19116be127ff0d4198e6ca970785c81ba2e136c15b245f878f6018bafda819170aff49f26abfac619642f21566e7260468c8080fb07bf3bdaad7686f
SSDEEP 1536:y8Hsin072FL6jTAebMX+A5V6xTf5Qt46:y7h3TDbMXDkj
TLSH
T1BD936A8DF5F2247DD756C530CD8B29B23621368886B0AE7F2785D53C3E2224A1F2DDA5
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64