cba1bb77e62f4ac7221e2a584d45e275a16e43bba839a838dd0838fc6ad97738

Analysis

max time kernel
133s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 02:32

Target
2024-05-25_2c4ef7d4cdb3a3773d445aca365148b8_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240525-c1d29sbf85
SHA256 cba1bb77e62f4ac7221e2a584d45e275a16e43bba839a838dd0838fc6ad97738
MD5 2c4ef7d4cdb3a3773d445aca365148b8
SHA1 de455e5c716914a5f8967d00d8623c345884310f
SHA512 02ec35615eae01310a024abc6a8b92457c51a2e98fa0fb26ce958108a8c30f865fc8f10dc0051a0163e9e513a372d6f50eb45b60481728c412aae4086483acc8
SSDEEP 3072:l5K/B0toLqSNJ4lZHQsozTS+SMqqDL2/TrK02G:lcytwPw1yTS+xqqDL6HK8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2192	548	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-05-25_2c4ef7d4cdb3a3773d445aca365148b8_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-25_2c4ef7d4cdb3a3773d445aca365148b8_bkransomware_gandcrab_karagany.exe"
1⤵
PID:548
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 548 -s 264
  2⤵
  - Program crash
  PID:2192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 548 -ip 548
1⤵
PID:1820