75252a0447b2ce27d7a80baf24e2982d9745c0b85ad12feca31a8d00520885e6

Analysis

max time kernel
77s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13-04-2023 03:20

Target

2023-04-11_0984446122188a07c4a1b3c8743662b8_gandcrab.exe
Size

155KB
MD5

0984446122188a07c4a1b3c8743662b8
SHA1

00b81a784646db3347b89fd8d6fdaa4ce8c6f6a9
SHA256

75252a0447b2ce27d7a80baf24e2982d9745c0b85ad12feca31a8d00520885e6
SHA512

94422dc2d2a617667ad38cecfd768757be59cf5ef9493de110de6e14d6b4e64a28506588093f17c674f4641b0c76889ad1b49c210d5be92dea43605569a808e8
SSDEEP

3072:S5K/B0toLlSNJDlxwsx89TSdBgjMqqDL2/TOKa0G:Scytw4OTTSdBgQqqDL6SKU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1888	1960	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2023-04-11_0984446122188a07c4a1b3c8743662b8_gandcrab.exe
"C:\Users\Admin\AppData\Local\Temp\2023-04-11_0984446122188a07c4a1b3c8743662b8_gandcrab.exe"
1⤵
PID:1960
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 272
  2⤵
  - Program crash
  PID:1888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1960 -ip 1960
1⤵
PID:1292