2374a67c799c7f9ac29a25c6da2a74409553e278d6ba0afbff3492779cb5d423

Analysis

max time kernel
134s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 22:41

Target
2024-05-24_92677f3601a4eab995c212a803477d25_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240524-2mlbvsdh75
SHA256 2374a67c799c7f9ac29a25c6da2a74409553e278d6ba0afbff3492779cb5d423
MD5 92677f3601a4eab995c212a803477d25
SHA1 c6a5d6f7e3c0d2b8e7759a9f1d06339af590efb7
SHA512 6624e4d6fe1333d3cdd1f63da971a8488f3341352795dde6471a5bcda409b4bfcb4dd1100a7059621fb600bef6eac57277a842b7d0b793bf3135115f28c86d07
SSDEEP 3072:l5K/B0toLQSNJClZHQsozTS+SMqqDL2/TrKnCG:lcytwta1yTS+xqqDL6HKL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	2284	WerFault.exe	91

C:\Users\Admin\AppData\Local\Temp\2024-05-24_92677f3601a4eab995c212a803477d25_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_92677f3601a4eab995c212a803477d25_bkransomware_gandcrab_karagany.exe"
1⤵
PID:2284
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 264
  2⤵
  - Program crash
  PID:2260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2284 -ip 2284
1⤵
PID:1960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3644,i,14648456027158448592,4956305794400220180,262144 --variations-seed-version --mojo-platform-channel-handle=4032 /prefetch:8
1⤵
PID:2176