ed3a7181e2faf9af476feb32b7382366389160dcaf3469089d7feaf2577cf0ad

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 22:28

Target
2024-05-24_56e07e1d15e42ffc2f40a56beb2f4ccc_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240524-2dw21ade72
SHA256 ed3a7181e2faf9af476feb32b7382366389160dcaf3469089d7feaf2577cf0ad
MD5 56e07e1d15e42ffc2f40a56beb2f4ccc
SHA1 bb34fa1fa3ce58a1d7aecd42d196174d13c58c21
SHA512 993e5abb9c97ab224239149c7f4952f94c2d11c9da3b6477f93a7e9fad0881d030559834c27f4e1c488dfb726f2581097bae25f1cdd8a62c2881b5d80f5196de
SSDEEP 3072:l5K/B0toLQSNJwlZHQsozTS+SMqqDL2/TrKvgG:lcytwts1yTS+xqqDL6HK9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3848	596	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2024-05-24_56e07e1d15e42ffc2f40a56beb2f4ccc_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_56e07e1d15e42ffc2f40a56beb2f4ccc_bkransomware_gandcrab_karagany.exe"
1⤵
PID:596
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 596 -s 264
  2⤵
  - Program crash
  PID:3848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 596 -ip 596
1⤵
PID:4220