General
- Target Crypter.exe
- Size 129KB
- Sample230328-hpt71ahe24
- SHA256 43c9c228baf00bc4614fdeb578eb84ad2232cef6c2820046b0b9fec502be573f
Score
9/10
Malware Config
Targets
-
- Target Crypter.exe
- Size 129KB
- SHA256 43c9c228baf00bc4614fdeb578eb84ad2232cef6c2820046b0b9fec502be573f
Score9/10Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.