cadd86a67a7d967de341e84c903277c5af99ee9662657518c26799a26fb811cb

Analysis

max time kernel
136s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 12:42

Target

2024-05-16_03b10e65640b70e403f4eb0990e8e307_bkransomware_gandcrab_karagany.exe
Size

155KB
MD5

03b10e65640b70e403f4eb0990e8e307
SHA1

1727a3c23c73e6635b204160ce49123700533806
SHA256

cadd86a67a7d967de341e84c903277c5af99ee9662657518c26799a26fb811cb
SHA512

e04c578bb4a13d1ff7e5f90587af82de136ebe6312bfc2b4ccd7ce901e9c1c3c5164a5db82623e48e4d9e9b046a508acca24f39098b0c22d5d88d8b998aff5e9
SSDEEP

3072:S5K/B0toLLSNJRlxwsx89TSdBgjMqqDL2/TOKCeG:ScytwWcTTSdBgQqqDL6SKO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
972	356	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-05-16_03b10e65640b70e403f4eb0990e8e307_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-16_03b10e65640b70e403f4eb0990e8e307_bkransomware_gandcrab_karagany.exe"
1⤵
PID:356
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 356 -s 272
  2⤵
  - Program crash
  PID:972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 356 -ip 356
1⤵
PID:2224