Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
24/07/2023, 12:31
Behavioral task
behavioral1
Sample
2023-07-12_2685b64cc7203d73a05e72ee7a48b462_gandcrab.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-07-12_2685b64cc7203d73a05e72ee7a48b462_gandcrab.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
2023-07-12_2685b64cc7203d73a05e72ee7a48b462_gandcrab.exe
-
Size
155KB
-
MD5
2685b64cc7203d73a05e72ee7a48b462
-
SHA1
16a43640647417ceaf2561d9b2990c37ceca74c8
-
SHA256
4a579536e5ac62858a820ecf66541e8153223c0d55cccbcfc74769f79d113ce8
-
SHA512
fcab9d4991c38d12fd834541d2cb34c6054acaaf126ada12276f3df4202e1c50a5e74222a6b1eba7682e40db22430bfc659ce0d1137fa7a8139b148de7bf9351
-
SSDEEP
3072:l5K/B0toLkSNJLlZHQsozTS+SMqqDL2/TrKTrG:lcytwpx1yTS+xqqDL6HK+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3368 4048 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-07-12_2685b64cc7203d73a05e72ee7a48b462_gandcrab.exe"C:\Users\Admin\AppData\Local\Temp\2023-07-12_2685b64cc7203d73a05e72ee7a48b462_gandcrab.exe"1⤵PID:4048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4048 -s 2642⤵
- Program crash
PID:3368
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 4048 -ip 40481⤵PID:4192