kinsing | 9c1329510eefafe6ea472296dce62eee4f4ae54d6c527f5b6c03921dbc010759

Analysis

max time kernel
93s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 17:45

Target

2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany.exe
Size

14.8MB
MD5

31e20a199088b9e06ce0eb723efc8bd4
SHA1

81eb89282775eec1ce85921b122d2e38e92d153f
SHA256

9c1329510eefafe6ea472296dce62eee4f4ae54d6c527f5b6c03921dbc010759
SHA512

aa5146bf68e82f446cbc36a1bce910f134b4213de5f497f8959ce5699a0a135e412a92115a52f9f814eab3fa7862e9c676bc3c1d9779416602f9d3ec20339060
SSDEEP

6144:lcytwb+1yTS+xqqDL6HKLERpuuwnGD/Nj:Cyi+1Rqn6qLGpuuq

Score

10^/10

kinsing loader

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4676	4760	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany.exe"
1⤵
PID:4760
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 216
  2⤵
  - Program crash
  PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4760 -ip 4760
1⤵
PID:4444