Analysis
-
max time kernel
139s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
04/09/2023, 16:52
Behavioral task
behavioral1
Sample
2023-08-23_6492633d486c5f915253c85829044e1a_gandcrab_JC.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-08-23_6492633d486c5f915253c85829044e1a_gandcrab_JC.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
-
Target
2023-08-23_6492633d486c5f915253c85829044e1a_gandcrab_JC.exe
-
Size
141KB
-
MD5
6492633d486c5f915253c85829044e1a
-
SHA1
53b541bf4f3dc9c2d0f3ee8b07d4f5caef006c3a
-
SHA256
01b21df15c0e9fe8076c8dd45aa48d84cb7c07f82bba173d9d8b4635b24d8207
-
SHA512
8af52156c114cb0475f94149d91271e8d914351c8bda7893509423112667a19a001982cc6309295c156c45a2004446fd9109fbfffcfa724190e9032a5138cf24
-
SSDEEP
3072:m5tmM+mRqQHVUs4QL1nMqqDL2/OPvdlV:m5t3Hj4QL1MqqDL6svdlV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4720 2224 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-23_6492633d486c5f915253c85829044e1a_gandcrab_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-23_6492633d486c5f915253c85829044e1a_gandcrab_JC.exe"1⤵PID:2224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 2202⤵
- Program crash
PID:4720
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2224 -ip 22241⤵PID:2176