Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12/02/2024, 01:37
General
-
Target
2024-02-12_5e5e477c53d4bec86e437033fcd1411b_karagany_mafia.exe
-
Size
250KB
-
MD5
5e5e477c53d4bec86e437033fcd1411b
-
SHA1
a3139d56e1fb507f3eafad32d98413af659a635e
-
SHA256
08dfc9c1a74df3d79f5c88a5094e598653d5b545b91bbcac2b9a1e19a6ae0253
-
SHA512
a33690553fbef94737193be5c110470a53f0bdfa955833bd14dd521cc282217105a23275d389f10e4e20e0246691b9ca6dcb9826d8c81a169deacacacef89e5b
-
SSDEEP
6144:r+YrOIBjaklexBgiJ8sTSIkIpxIp8mDtfPBRwasxXq:fOCjaklYgVIpxIhDtR
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Detects Reflective DLL injection artifacts 2 IoCs
-
Detects ransomware indicator 2 IoCs
-
Gandcrab Payload 2 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_5e5e477c53d4bec86e437033fcd1411b_karagany_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_5e5e477c53d4bec86e437033fcd1411b_karagany_mafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2796 -s 4682⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2796 -ip 27961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
92KB
-
Filesize
108KB