8f7f9010c0a75ce0ddf2f5d38e15d82a2fdb119f94bac7cfa163302fd440e88f

Analysis

max time kernel
134s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 22:33

Target
2024-05-24_6484b3df423759fff1167b7b293cb67c_bkransomware_gandcrab_karagany.exe
Size 141KB
Sample240524-2grxfsdf76
SHA256 8f7f9010c0a75ce0ddf2f5d38e15d82a2fdb119f94bac7cfa163302fd440e88f
MD5 6484b3df423759fff1167b7b293cb67c
SHA1 3c3a070a7908c454381ccc86394d4de3014cfc0e
SHA512 03331ee1446098a0125641121c8f10f6ec4de10f319165e806e403549c66d4699b88902adcef944414a7af01dcbb36150ab3a583e7d43cae290de943e57d5c9d
SSDEEP 3072:m5tmM+mBqQHZUs4QL1nMqqDL2/OPvdlH:m5t3Pj4QL1MqqDL6svdlH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3164	4156	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2024-05-24_6484b3df423759fff1167b7b293cb67c_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_6484b3df423759fff1167b7b293cb67c_bkransomware_gandcrab_karagany.exe"
1⤵
PID:4156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4156 -s 220
  2⤵
  - Program crash
  PID:3164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4156 -ip 4156
1⤵
PID:4132