c0cd238d69013cacb6fb05b9c95e51641dec9ab20d10b481ee2ff6b3fe5d8eaf

Analysis

max time kernel
133s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 03:40

Target
2024-05-25_3cdfaf1f3d6aac3a5f99e50ff5113ff1_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240525-d8f29sdc4v
SHA256 c0cd238d69013cacb6fb05b9c95e51641dec9ab20d10b481ee2ff6b3fe5d8eaf
MD5 3cdfaf1f3d6aac3a5f99e50ff5113ff1
SHA1 61e9bc595771d71ad76eb74867ac57aba4bf74d9
SHA512 bb6d04602f6a6c14850c93931eff09f7eb7cc532dc56d30e1a8ef30dcf2f2d672aa7567f5651119ceee431d26d3ba87c48effbd428cc7ccc4ea8e32123533b6f
SSDEEP 3072:l5K/B0toLvSNJ+lZHQsozTS+SMqqDL2/TrKMMG:lcytwy+1yTS+xqqDL6HKe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4752	4464	WerFault.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-05-25_3cdfaf1f3d6aac3a5f99e50ff5113ff1_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-25_3cdfaf1f3d6aac3a5f99e50ff5113ff1_bkransomware_gandcrab_karagany.exe"
1⤵
PID:4464
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4464 -s 264
  2⤵
  - Program crash
  PID:4752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4464 -ip 4464
1⤵
PID:4620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3596,i,17096020621006928097,15544233752327415349,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
1⤵
PID:4820