Analysis
- max time kernel
141s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
07/01/2024, 19:37
General
- Target 20240106e5e22a1eec8b66b358157102b2aa9c61karaganymafia.exe
- Size 308KB
- Sample240107-yb75pscgan
- SHA256 bf5c2de3449eb67e1c56cbe2f26444622297e4a1ef4ffd4e8bb4ec020c62706f
Score
10/10
Malware Config
Signatures
- GandCrab payload 2 IoCs
- Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20240106e5e22a1eec8b66b358157102b2aa9c61karaganymafia.exe"C:\Users\Admin\AppData\Local\Temp\20240106e5e22a1eec8b66b358157102b2aa9c61karaganymafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4332 -s 4882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4332 -ip 43321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4332-1-0x000000000ACD0000-0x000000000ADD0000-memory.dmp
memory/4332-2-0x0000000000400000-0x0000000001400000-memory.dmp
memory/4332-3-0x000000000AC80000-0x000000000AC97000-memory.dmp