SecuriteInfo[.]com[.]Trojan-Ransom[.]StopCrypt[.]22110[.]437[.]exe

General

Target
SecuriteInfo.com.Trojan-Ransom.StopCrypt.22110.437.exe
Size 153KB
Sample240708-qkhmea1arr
SHA256 793959ab5ee6f59d49e330b808c2300772290f68bce04be397b1d02ea26833e6
MD5 fed1740e597fff2d18ccd42e44d3f099
SHA1 7fbf25801100278f9ddfc0a40e1cd8cd46fb0288
SHA512 20e9b344223d7d6ad891ecb2fda491c7e0b5c1f92f740e94d9d13091abba7278ac61a58457136befaaccbbc33606940d3dbb61e230fcf6b881777f5ae49532cb
SSDEEP 3072:+0LookdnSvrOMsV2UAFe0mfU5LJLqTkAFUVwE7wQWLc:BLoo6eCMsEA+FukU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan-Ransom.StopCrypt.22110.437.exe

File Explorer

SecuriteInfo.com.Trojan-Ransom.StopCrypt.22110.437.exe

.exe 153KB

SecuriteInfo.com.Trojan-Ransom.StopCrypt.22110.437.exe

IMPHASH efa3477900268cf80215603c1ee46c1e
SHA256 793959ab5ee6f59d49e330b808c2300772290f68bce04be397b1d02ea26833e6
MD5 fed1740e597fff2d18ccd42e44d3f099
SHA1 7fbf25801100278f9ddfc0a40e1cd8cd46fb0288
SHA512 20e9b344223d7d6ad891ecb2fda491c7e0b5c1f92f740e94d9d13091abba7278ac61a58457136befaaccbbc33606940d3dbb61e230fcf6b881777f5ae49532cb
SSDEEP 3072:+0LookdnSvrOMsV2UAFe0mfU5LJLqTkAFUVwE7wQWLc:BLoo6eCMsEA+FukU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW SleepEx GetModuleHandleW GetTickCount GetConsoleAliasesA GlobalAlloc SetVolumeMountPointA lstrcpynW GetModuleFileNameW SetConsoleTitleA ReleaseActCtx SetLastError GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd SetFileApisToANSI AddAtomA OpenJobObjectW FoldStringW lstrcatW EnumDateFormatsW FindFirstVolumeA LocalFree GetLastError HeapFree MultiByteToWideChar HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

winhttp

WinHttpAddRequestHeaders

Sharing