58fe2b1aaf33e03168c8688487f0d097d99bb9cc60d5eba05b691b7c992c96a8

Analysis

max time kernel
143s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
08/08/2023, 15:18

Target

9667b7954a649e5911b317fc983cbe16_gandcrab_JC.exe
Size

143KB
MD5

9667b7954a649e5911b317fc983cbe16
SHA1

dfb48549f37d783df01d580417f4c33351aea2e9
SHA256

58fe2b1aaf33e03168c8688487f0d097d99bb9cc60d5eba05b691b7c992c96a8
SHA512

45ed50cc981c5828e3ad39fa4996e1dafaaa7f1e02129d7eee9d66e87660ef0b6ebb9673601bb043539e660fd084ac27832a005490d334a01767dee4a7bb3a23
SSDEEP

3072:o+HcL2eCfoTntqSQRruiMZMqqDL2/Awvd+7Vjp9:haDtORruiMyqqDL6tvdEp9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2200	1576	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\9667b7954a649e5911b317fc983cbe16_gandcrab_JC.exe
"C:\Users\Admin\AppData\Local\Temp\9667b7954a649e5911b317fc983cbe16_gandcrab_JC.exe"
1⤵
PID:1576
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1576 -s 264
  2⤵
  - Program crash
  PID:2200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1576 -ip 1576
1⤵
PID:4472