8416255b6aa9397c6717a7a62a912a3a1b9bf16907cf2d0e39eb117c23eda039

Analysis

max time kernel
90s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2024, 23:21

Target

2024-01-23_2bf71a4edfa76118b446a89f56c7ac66_gandcrab_karagany.exe
Size

272KB
MD5

2bf71a4edfa76118b446a89f56c7ac66
SHA1

e02f50e2d37f1453ed95d8eed4a9a50f079959e5
SHA256

8416255b6aa9397c6717a7a62a912a3a1b9bf16907cf2d0e39eb117c23eda039
SHA512

77cd328e76332c756e15a33b53094b91cab0d5460c4528587f49ba198251e67ba4425913e48d3880c1ebf5da7da720b4afc94ce7f52b1b65fe3c751792c46bc5
SSDEEP

3072:l5K/B0toLOSNJylZHQsozTS+SMqqDL2/TrKRvGrBuj00nReaXkuSQ7cdOd:lcytwbq1yTS+xqqDL6HKUrUDOI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1128	2008	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\2024-01-23_2bf71a4edfa76118b446a89f56c7ac66_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-23_2bf71a4edfa76118b446a89f56c7ac66_gandcrab_karagany.exe"
1⤵
PID:2008
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2008 -s 216
  2⤵
  - Program crash
  PID:1128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2008 -ip 2008
1⤵
PID:4952