9040bdc50a29a4380dd7553bbb7d3a36717f97fe80b2dd29b1462e0d140a45a9

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2023, 12:32

Target

2023-07-13_b9692c1aa1a57540fd677cacf9f3306a_gandcrab.exe
Size

155KB
MD5

b9692c1aa1a57540fd677cacf9f3306a
SHA1

1890376f0248a04c4f8226f14e75b06aa4846aea
SHA256

9040bdc50a29a4380dd7553bbb7d3a36717f97fe80b2dd29b1462e0d140a45a9
SHA512

8aaec372e36ca694307a613855b434d6775e11014c3b49896850d396c21011f43241c5244d96f936c71ed14aadbbba88e1fa4ae2c90de7084ce7c0a6cbe9bbe1
SSDEEP

3072:l5K/B0toLDSNJclZHQsozTS+SMqqDL2/TrK4dG:lcytwOQ1yTS+xqqDL6HKH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3768	3792	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2023-07-13_b9692c1aa1a57540fd677cacf9f3306a_gandcrab.exe
"C:\Users\Admin\AppData\Local\Temp\2023-07-13_b9692c1aa1a57540fd677cacf9f3306a_gandcrab.exe"
1⤵
PID:3792
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3792 -s 276
  2⤵
  - Program crash
  PID:3768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3792 -ip 3792
1⤵
PID:3408