Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
08/09/2022, 19:39
General
-
Target
3724ce5d98c3ce0c9335ef5262a0f565.exe
-
Size
320KB
-
MD5
3724ce5d98c3ce0c9335ef5262a0f565
-
SHA1
6b29d8f5e6d6938a2e72791a0ace6daa8f06a4ed
-
SHA256
fb7114a1c513994988cdc5a1c4e2ef7f671388e0e386f0466dbb41bd3bbae362
-
SHA512
7ad626c9218dd95628489e18d6bcc3d6455c5ca6df838fa2fbe5ab0aeef4e1902c64ed826c7a6efea8857b241ea3196f3cba7748f2dba5e333e04302905831fd
-
SSDEEP
3072:5bRXn2p4B/51pzVyqZ5iQ88ZJmj3h2OdyC9aNhw3cvo2bDi5fBbHHD+FtW89:5b9+g/pzVwQ82Jm7h2As36CtaJHjN89
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3724ce5d98c3ce0c9335ef5262a0f565.exe"C:\Users\Admin\AppData\Local\Temp\3724ce5d98c3ce0c9335ef5262a0f565.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1804 -s 4842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1804 -ip 18041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
31.5MB
-
Filesize
31.5MB
-
Filesize
92KB
-
Filesize
112KB