10159d75ee366719b3f5176d1aa5206a5ba38c855c7bf07f5e8251e8cc848e22

Analysis

max time kernel
126s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2023, 12:52

Target

2023-07-14_95b2b1301e32832ea3bdba85d7edfebe_gandcrab.exe
Size

155KB
MD5

95b2b1301e32832ea3bdba85d7edfebe
SHA1

a5fcce69033fa3aa5d937ae5ddd772ace9eb19c8
SHA256

10159d75ee366719b3f5176d1aa5206a5ba38c855c7bf07f5e8251e8cc848e22
SHA512

5fa563ccbf75afabd51333cb05d450689832a49ff828ed8c5e3a77aeccda49d2cc24770b164cb3716aeddd4d5eb439f189e9ecccafd787fbc2d3c813c12f77b5
SSDEEP

3072:l5K/B0toL2SNJUlZHQsozTS+SMqqDL2/TrKirG:lcytwj81yTS+xqqDL6HKf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4352	1500	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2023-07-14_95b2b1301e32832ea3bdba85d7edfebe_gandcrab.exe
"C:\Users\Admin\AppData\Local\Temp\2023-07-14_95b2b1301e32832ea3bdba85d7edfebe_gandcrab.exe"
1⤵
PID:1500
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 264
  2⤵
  - Program crash
  PID:4352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1500 -ip 1500
1⤵
PID:4272