Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/03/2024, 10:48
General
-
Target
2024-03-11_8480c04c189e51cb3bc7cfa3e5dd93ed_karagany_mafia.exe
-
Size
222KB
-
MD5
8480c04c189e51cb3bc7cfa3e5dd93ed
-
SHA1
5688426b3acf7d28fb0a94df73b7e5b42ee5f605
-
SHA256
0e4e8a1afc4471c1f8e30b918995a75b24f61d45a2de88644cfcca42760a6b55
-
SHA512
6f1bd8484ab146a91b3e2580841c9ac59524aac7a890508f3f57aa4f963fca4003c198ca3d61ce2a4a4658b9bb1ab984d2fdaa74c48c7e348b2b4f251fc97df4
-
SSDEEP
3072:3BbWxYKFDnqvffIj0nStxBN3cwqvcQr3YTfVEPnYbl3/YrDAEioKhAv/:3BkYKZSYYnS1xecmoT2nYbdEKs/
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Detects Reflective DLL injection artifacts 2 IoCs
-
Detects ransomware indicator 2 IoCs
-
Gandcrab Payload 2 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-11_8480c04c189e51cb3bc7cfa3e5dd93ed_karagany_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-11_8480c04c189e51cb3bc7cfa3e5dd93ed_karagany_mafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 712 -s 4522⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 712 -ip 7121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
92KB
-
Filesize
108KB