Analysis
-
max time kernel
127s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
31-08-2023 18:50
General
-
Target
fd12370aefc258ee6b5ea6e8183ff8b3_mafia_JC.exe
-
Size
250KB
-
MD5
fd12370aefc258ee6b5ea6e8183ff8b3
-
SHA1
2e3ffaef12e0d1c7f7466b02adb030bc8e0b7d38
-
SHA256
42dc6eb5ab00270fbbd9e987649c7b4af7fc0c54e11b362d2b7fcb1129ad6ea2
-
SHA512
968ecd92b0fca2fdf2195a54c4b9a79eb054bc067210a3e7b8ce4929df2a7df7aa381cbcf927545cec30dab08cd2ef5f00350080a64579cdc9f73519133d0c45
-
SSDEEP
6144:9+YrOIBjaklexBgiJ8sTSIkIpxIp8mDtfPBRwasxXq:9OCjaklYgVIpxIhDtR
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd12370aefc258ee6b5ea6e8183ff8b3_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\fd12370aefc258ee6b5ea6e8183ff8b3_mafia_JC.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 4722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1568 -ip 15681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
92KB
-
Filesize
108KB