Analysis
-
max time kernel
128s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
26-04-2023 03:52
Behavioral task
behavioral1
Sample
2023-04-23_f64103dd5c5228a6379070b0b4dc9795_gandcrab.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-04-23_f64103dd5c5228a6379070b0b4dc9795_gandcrab.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
2023-04-23_f64103dd5c5228a6379070b0b4dc9795_gandcrab.exe
-
Size
16.0MB
-
MD5
f64103dd5c5228a6379070b0b4dc9795
-
SHA1
b194116cd2d99a1539af75f0133ee419ac709627
-
SHA256
6f38921828a4f24847d00bbf6bc8fbfa24b53e3b1631c7e0d2cf9641a0712d42
-
SHA512
38537836ec1a3df3f265629f4c351332769869616a44534d8090a1b20f2296602b825ad03a149e40025f31f6a6ea69d1f9dec132855022a9d7eeba17ea62cbc9
-
SSDEEP
3072:S5K/B0toLOSNJ+lxwsx89TSdBgjMqqDL2/TOKv4Gl:ScytwblTTSdBgQqqDL6SKF
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-04-23_f64103dd5c5228a6379070b0b4dc9795_gandcrab.exe"C:\Users\Admin\AppData\Local\Temp\2023-04-23_f64103dd5c5228a6379070b0b4dc9795_gandcrab.exe"1⤵PID:60
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 60 -ip 601⤵PID:5044