64d31206d50ed8e801ec34c7019e5c9568eedf1c0cfd30132bcae40377abb695

Analysis

max time kernel
134s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2023, 02:59

Target

2023-05-18_9d4a03cf8f7def6f79b729e5b36c22d5_gandcrab.exe
Size

155KB
MD5

9d4a03cf8f7def6f79b729e5b36c22d5
SHA1

eb5abe46e3459140ddaf9f48f274ae25661d0d59
SHA256

64d31206d50ed8e801ec34c7019e5c9568eedf1c0cfd30132bcae40377abb695
SHA512

f0392052dc034fd62f9b37bd974733a3b90ff9cc0a46e323e943b080291a9d352bda7bec591ca8125d27068503f44bd713fce5439115dc13424989cee6a31e46
SSDEEP

3072:S5K/B0toLQSNJ0lxwsx89TSdBgjMqqDL2/TOKy2G:ScytwtfTTSdBgQqqDL6SKy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3956	3324	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2023-05-18_9d4a03cf8f7def6f79b729e5b36c22d5_gandcrab.exe
"C:\Users\Admin\AppData\Local\Temp\2023-05-18_9d4a03cf8f7def6f79b729e5b36c22d5_gandcrab.exe"
1⤵
PID:3324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3324 -s 272
  2⤵
  - Program crash
  PID:3956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3324 -ip 3324
1⤵
PID:3936