Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11/01/2024, 05:58
General
-
Target
2024-01-10_f38470ad60fffac6199a4d4829c101ba_karagany_mafia.exe
-
Size
308KB
-
MD5
f38470ad60fffac6199a4d4829c101ba
-
SHA1
50312f02d61f344246f47df67ac1ca75d001d0a2
-
SHA256
b7d30183ed3e57a6eaeccea074220c943f66931dddc3e09ceeb1ec4230169524
-
SHA512
9b03df336aaca5f18b1bff9ab5a210205b88b8df977b7aa3a3af21c3e67a9e0e7e8beeb8b49d7c688171a8da0fb212e98942cb3d590fd649a1ad70b9965504b7
-
SSDEEP
6144:AzL7ShWDLVzVNam6GxI29dqG3KdYAYqTuPZp:mDHNam62ZdKmZmuPH
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-10_f38470ad60fffac6199a4d4829c101ba_karagany_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-10_f38470ad60fffac6199a4d4829c101ba_karagany_mafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4356 -s 4842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4356 -ip 43561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
92KB
-
Filesize
1024KB