Analysis
- max time kernel
139s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
07/01/2024, 19:20
General
- Target 202401069fee02cc173f13d9435843111f039653karaganymafia.exe
- Size 308KB
- Sample240107-x2caaadbh7
- SHA256 80e7f21baba6ca6b8ff2a8621204f3cc1ab892511a293cb0056656ab9d0e3f80
Score
10/10
Malware Config
Signatures
- GandCrab payload 2 IoCs
- Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\202401069fee02cc173f13d9435843111f039653karaganymafia.exe"C:\Users\Admin\AppData\Local\Temp\202401069fee02cc173f13d9435843111f039653karaganymafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 4882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2908 -ip 29081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2908-1-0x000000000ABB0000-0x000000000ACB0000-memory.dmp
memory/2908-2-0x0000000000400000-0x0000000001400000-memory.dmp
memory/2908-3-0x000000000AB80000-0x000000000AB97000-memory.dmp