InfinityCrypt.exe

Classification: Malicious

InfinityCrypt.exe is a ransomware (Windows executable, 211.0 KB). Flagged by 82% of antivirus engines (76 detections). Linked to Wiper malware.

Detection summary

  • 76 antivirus detections (82% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: WIPER (S0041)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-10-16 22:00:31 2026-10-16 22:00:31 malicious-activity
Infinitylock Triage 2026-03-18 17:33:15 2026-09-17 20:16:36 malicious-activity
Generic Malware Hybrid-Analysis 2023-06-26 22:15:03 2023-06-26 22:15:03
Ransomware VM-Ray 2022-08-31 21:19:39 2022-08-31 21:19:39
Wiper VM-Ray 2022-08-31 21:19:39 2022-08-31 21:19:39 S0041 Wiper
Generic.Ransom.Hiddentear.A Hybrid-Analysis 2019-09-08 13:00:05 2019-09-08 13:00:05

Tags

hiddentear infinitylock discovery persistence ransomware

Sample information

Filenames
InfinityCrypt.exe, [email protected], [email protected], f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
216064 bytes
MD5
b805db8f6a84475ef76b795b0d1ed6ae
SHA-1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
SHA-256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
SHA-512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
First indexed
2019-09-08 13:00:05
Last updated
2026-09-17 20:58:24

Antivirus detections

EngineDetection
MicroWorld-eScanGeneric.Ransom.Hiddentear.A.3B16324D
McAfeeRansom-Infinity!B805DB8F6A84
BitDefenderGeneric.Ransom.Hiddentear.A.3B16324D
ESET-NOD32a variant of MSIL/Filecoder.JX
APEXMalicious
Ad-AwareGeneric.Ransom.Hiddentear.A.3B16324D
EmsisoftGeneric.Ransom.Hiddentear.A.3B16324D (B)
F-SecureHeuristic.HEUR/AGEN.1033406
Invinceaheuristic
McAfee-GW-EditionRansom-Infinity!B805DB8F6A84
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.b805db8f6a84475e
SophosCrackTool (PUA)
AviraHEUR/AGEN.1033406
MicrosoftRansom:Win32/Crystalcrypt.A
ArcabitGeneric.Ransom.Hiddentear.A.3B16324D
GDataGeneric.Ransom.Hiddentear.A.3B16324D
ALYacGeneric.Ransom.Hiddentear.A.3B16324D
MAXmalware (ai score=88)
MalwarebytesHackTool.Agent
SentinelOneDFI - Malicious PE
Cybereasonmalicious.f6a844
ALYacTrojan.Ransom.InfinityLock
AVGWin32:MalwareX-gen [Ransom]
AhnLab-V3Trojan/Win32.Crypt.C3464069
AlibabaTrojan:Win32/starter.ali1000030
Antiy-AVLTrojan[Ransom]/MSIL.InfinityLock
AvastWin32:MalwareX-gen [Ransom]
AviraTR/W32.Trojan
BkavW32.Common.F209FE3D
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.29537
ESET-NOD32MSIL/Filecoder.InfinityLock.D trojan
Elasticmalicious (high confidence)
F-SecureTrojan.TR/W32.Trojan
FortinetMSIL/Filecoder.67C3!tr.ransom
GoogleDetected
GridinsoftRansom.Win32.Filecoder.ko!s3
IkarusTrojan-Ransom.FileCrypter
JiangminTrojan.MSIL.pjee
K7AntiVirusTrojan ( 700000201 )
K7GWTrojan ( 700000201 )
KasperskyHEUR:Trojan-Ransom.Win32.Generic
KingsoftWin32.Trojan-Ransom.Generic.a
LionicTrojan.Win32.Hiddentear.j!c
MalwarebytesGeneric.Ransom.FileCryptor.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeDti!F5D002BFE80B
MicrosoftRansom:MSIL/Cryptolocker.PDB!MTB
NANO-AntivirusTrojan.Win32.Encoder.fzpchz
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingRansom.InfinityCrypt!1.CA3F (CLASSIC)
SUPERAntiSpywareRansom.Hiddentear/Variant
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighRansom-Infinity!B805DB8F6A84
SymantecRansom.CryptXXX
TencentMalware.Win32.Gencirc.10be058e
TrellixENSRansom-Infinity!B805DB8F6A84
TrendMicroRansom.MSIL.INFINITYLOCK.B
TrendMicro-HouseCallRansom.MSIL.INFINITYLOCK.B
VBA32TScope.Trojan.MSIL
VIPREGeneric.Ransom.Hiddentear.A.3B16324D
VaristW32/ABRansom.PRON-2284
VirITTrojan.Win32.HiddenTear.BRN
WebrootW32.Malware.gen
XcitiumMalware@#29jihuv111nwf
YandexTrojan.Filecoder!O/4IU5jLF6U
ZillyaTrojan.Filecoder.Win32.10768
alibabacloudRansomWare
huorongRansom/MSIL.LockFile.c

Process list

NameCommand line
[email protected]
InfinityCrypt.exe