10067b1c67de673f05fdf13a8be8da216b105ac94b555a92a4e5e72e9bef54dc

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 01:43

Target
2024-05-25_0b6967542d6ee44a32d350db9af2c64f_bkransomware_gandcrab_karagany.exe
Size 141KB
Sample240525-b5cvbsae38
SHA256 10067b1c67de673f05fdf13a8be8da216b105ac94b555a92a4e5e72e9bef54dc
MD5 0b6967542d6ee44a32d350db9af2c64f
SHA1 97ce0ad2b3690d0e22e52f020f1abf1a19aa6dfe
SHA512 fc01beca95ede8fdc2596ab018a958362a1a8d581da2c9fd7864e0cfd340bf90c386e7c7946b5659c7083bc6ceb11cc7696a3ff54adf9121e42a51d2eeff699f
SSDEEP 3072:m5tmM+mBqQHwUs4QL1nMqqDL2/OPvdlN:m5t3aj4QL1MqqDL6svdlN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2744	2640	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-05-25_0b6967542d6ee44a32d350db9af2c64f_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-25_0b6967542d6ee44a32d350db9af2c64f_bkransomware_gandcrab_karagany.exe"
1⤵
PID:2640
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2640 -s 220
  2⤵
  - Program crash
  PID:2744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2640 -ip 2640
1⤵
PID:1260