Analysis

  • user interaction
    yes
  • max time kernel
    24s
  • max time network
    24s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/09/2026, 08:44

General

  • Target
    Ransomware.InfinityCrypt.exe
  • Size 211KB
  • Sample260912-km97jsvwct
  • SHA256 f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware.InfinityCrypt.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware.InfinityCrypt.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    PID:5800

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        icudtl.dat.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 16B
        • SHA256 7f6b172a3496b0f6d3f4298c3248a2757f5ca72f2af4815cdf03784018eb00da
        • MD5 SHA1 SHA512

        s_remove_18.svg.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 720B
        • SHA256 f73c596296ff161c249a9d978c980154b039084942ccf8168b644e53ab83712e
        • MD5 SHA1 SHA512 TLSH

        example_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 688B
        • SHA256 557bb69bc568fcec0adb9948a60b3ab42ff57cb2a0cdd54b7573472f544e8075
        • MD5 SHA1 SHA512 TLSH

        example_icons2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 1KB
        • SHA256 81b63c568d2cda259f78e277d6682af0bf564e934057ce8e8a24462d574f451c
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 448B
        • SHA256 4e769d2bf830025287190874f762fe03b64f6b77b4f0fdb50b1a85ad5a3127ff
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 624B
        • SHA256 046ff5ba424eb14bae66ad2bff7a2ab9243fc3fc38d0f22c19a07159e3382da6
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 400B
        • SHA256 b9d8f29c5aa4c0cd4bba2d6656417d2a208af3c2e31acdf9c14398649ec86871
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 560B
        • SHA256 325963d3553e6e7a4c1b0ed67b2e7565c0f2baee087e95944a4358924a8d9b27
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 400B
        • SHA256 a68fbfad5893819712cf539aeb761557324d1770473aeb87eb15a4ff5d22a8c5
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 560B
        • SHA256 b3dc4dc16bd27ae3f47ef59c0cab32ad3a5ce0b3c21786ced6c273b7519d7c11
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 400B
        • SHA256 f4446a8d9d07a172903582eef178fe592d845db0597e9f952f31b1e6629b201a
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 560B
        • SHA256 7bf8e3aabaf6efaed46385993626839717b8f32551b3aa8758202288c7161878
        • MD5 SHA1 SHA512 TLSH

        icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 7KB
        • SHA256 10c09f56b54a172c7139e7ab04c6b7e7f6a15a3ff145f7aa98cebdc365c3cffc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_ie8.gif.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 7KB
        • SHA256 12ab5495ab83ec954b6748d76a24ed80b364c7cbfde8dddd89294f061d4d6923
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 15KB
        • SHA256 ff325075c4253be702fb705209bb2001c3a682e4ae23bd5cbc8fa32462be2732
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 8KB
        • SHA256 b6b378dfb0b4afeaec8975f6340a2a9a06a02e078e65e8d11caa5eb5010fa7a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 17KB
        • SHA256 df561e95c239c4dde99163a1909c52b3e7ee2e3187b57fc8d078776c6f85770d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg_pattern_RHP.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 192B
        • SHA256 3d5e142b3ab6a8db0b6f7f695ba6a92ca4d447d8f84e5d0488a3b33255b15b9d
        • MD5 SHA1 SHA512 TLSH

        bg_patterns_header.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 704B
        • SHA256 d7d01310471950f7e2a7d95d4b19c4d3f0d9e9ad3e76ca892afb1337d538e174
        • MD5 SHA1 SHA512 TLSH

        illustrations.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 8KB
        • SHA256 e2b99882f6335a10c29af4dfae9ef6280452621600aa0e082d69e57c74588389
        • MD5 SHA1 SHA512 SSDEEP TLSH

        illustrations_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 19KB
        • SHA256 3303141d6153276f33224cb22b6da9ee718c67cbd980955913e9fc323cabb18e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 832B
        • SHA256 e50832bbc897466ee8165d1cb6daa927700fe738fcc071972ca3dad44b446cc5
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 1KB
        • SHA256 6c862923085a5f190d364c818d07324b2758a87c29cb7a9bd4d67916863aea67
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 1KB
        • SHA256 48f57c09fd41ce5146f597bd5bb68938b4dfef78bbff89f606954527f7eb5baf
        • MD5 SHA1 SHA512 TLSH

        main.css.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 816B
        • SHA256 89445f282c3002a2345c49d1cbc4a460ac92d73d199037d7144d09fbd3d7343b
        • MD5 SHA1 SHA512 TLSH

        bun.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 2KB
        • SHA256 400a39be02a703db0f4e3de686ae53df4b4ad114bae220b5841708b477ae3c96
        • MD5 SHA1 SHA512 TLSH

        cstm_brand_preview.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 2KB
        • SHA256 d688e37ff53b5c010d4967d566e4a65c68648f5a7dc80e303dffbff87b5a51f8
        • MD5 SHA1 SHA512 TLSH

        cstm_brand_preview2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 4KB
        • SHA256 a2f480624bddf55db0463908156ba8d555325dcab05c31d3e830eac71373e242
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dd_arrow_small.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 304B
        • SHA256 51e55398628c970aa94dc3298989a620c01ea9e15d43dd9ea30a1921a2f10e17
        • MD5 SHA1 SHA512 TLSH

        dd_arrow_small2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 400B
        • SHA256 38cf5b58163aad3467f91091eef1d4533b59a1c9d62ac61dcd8e7505c77a7af2
        • MD5 SHA1 SHA512 TLSH

        nub.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 1008B
        • SHA256 714a89ab2036fc183c410a409e04fcac101a4758fbce7f8460016965ac802b8c
        • MD5 SHA1 SHA512 TLSH

        share_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 1KB
        • SHA256 9433b4073aa1ada762b1ab6ab403e5345c4579540b110deff028367f87576436
        • MD5 SHA1 SHA512 TLSH

        share_icons2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 2KB
        • SHA256 99b9e3f877dffa2fc2caeefff41692e37993487140e418169a44bc52600b46ce
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 848B
        • SHA256 5483b0c1b2b6cc718eae56c5d422e95e1ebec0b79568eefed17e4ce81b6e79d6
        • MD5 SHA1 SHA512 TLSH

        DisplayLanguageNames.en_US_POSIX.txt.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.1B21CF7BFFCB66869142D6763E637E0FC3872CC4135D2F8E2C0314CE081B440A
        • Size 32KB
        • SHA256 28aca9944125be37c41f5eadc8057c53656b7be5b7e7a2656e7dd9e2dcdb4736
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5800-371-0x0000000074CD2000-0x0000000074CD3000-memory.dmp

        memory/5800-810-0x0000000074CC0000-0x000000007547C000-memory.dmp

        memory/5800-0-0x0000000074CD2000-0x0000000074CD3000-memory.dmp

        memory/5800-7-0x0000000074CC0000-0x000000007547C000-memory.dmp

        memory/5800-6-0x0000000005000000-0x0000000005056000-memory.dmp

        memory/5800-5-0x0000000002AC0000-0x0000000002ACA000-memory.dmp

        memory/5800-4-0x0000000004F00000-0x0000000004F92000-memory.dmp

        memory/5800-3-0x00000000054C0000-0x0000000005A7A000-memory.dmp

        memory/5800-2-0x0000000004E60000-0x0000000004EFC000-memory.dmp

        memory/5800-1-0x00000000002C0000-0x00000000002FC000-memory.dmp