4345944180159b278dea20decc63a9e2e7303ffc71b327a508fe0eae54b4d155

Analysis

max time kernel
142s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
06/08/2023, 18:08

Target

9000718ee532bc15c3aea111a58fcc67_gandcrab_JC.exe
Size

155KB
MD5

9000718ee532bc15c3aea111a58fcc67
SHA1

0832a465d2ca1d727d90bf6b836bbde6805636c8
SHA256

4345944180159b278dea20decc63a9e2e7303ffc71b327a508fe0eae54b4d155
SHA512

a447d50179775492b32bf4b602b2af24e88d1f809d12fbfb9a8b08b062a7214476a87ac6ad3673ca196a6a101e881b7df2c10cc53ec5a27be7b4712125625c7e
SSDEEP

3072:S5K/B0toLASNJLlxwsx89TSdBgjMqqDL2/TOKi7G:Scytw92TTSdBgQqqDL6SKL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1988	1820	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\9000718ee532bc15c3aea111a58fcc67_gandcrab_JC.exe
"C:\Users\Admin\AppData\Local\Temp\9000718ee532bc15c3aea111a58fcc67_gandcrab_JC.exe"
1⤵
PID:1820
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1820 -s 264
  2⤵
  - Program crash
  PID:1988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1820 -ip 1820
1⤵
PID:4864