Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2023, 19:09
Behavioral task
behavioral1
Sample
c8d6177de6569d1950d34e1b90ae02a8_gandcrab_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8d6177de6569d1950d34e1b90ae02a8_gandcrab_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
c8d6177de6569d1950d34e1b90ae02a8_gandcrab_JC.exe
-
Size
155KB
-
MD5
c8d6177de6569d1950d34e1b90ae02a8
-
SHA1
d72ba9aff4db304cc3c4aff5c00093286f6d9760
-
SHA256
bb5981c3d1a501acca371d31ea5d63743731e9a76dd0d79062530c5fabddcce6
-
SHA512
56746e3bc08f69a35b22495db1ca9a1423b0880f836bec92c3684fe4d7501298ac0d0edbad1e804aa9d7ea535f60995aa164f0d5b4c21dc178133bc5d3c29497
-
SSDEEP
3072:l5K/B0toLfSNJMlZHQsozTS+SMqqDL2/TrKjXG:lcytwCM1yTS+xqqDL6HKq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4360 1808 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8d6177de6569d1950d34e1b90ae02a8_gandcrab_JC.exe"C:\Users\Admin\AppData\Local\Temp\c8d6177de6569d1950d34e1b90ae02a8_gandcrab_JC.exe"1⤵PID:1808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1808 -s 2682⤵
- Program crash
PID:4360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1808 -ip 18081⤵PID:5012