4b3cecc8ba159dcc4898d1ef3201df0d32ac460ca8daa25b62fcd3cf2f837fd6

Analysis

max time kernel
131s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 03:41

Target
2024-05-25_3f74fb42f6412adc87272c9eee654ae1_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240525-d9aa4sdd69
SHA256 4b3cecc8ba159dcc4898d1ef3201df0d32ac460ca8daa25b62fcd3cf2f837fd6
MD5 3f74fb42f6412adc87272c9eee654ae1
SHA1 5f1495b956eed30a459a7ff4d2564a2735ce00c2
SHA512 3a1ded789355f169e20966facb60fa705fa78a19c8a279b288123dceba94c191116f696581e445b60064a1925fedeaa8da17d98c75ba59c2bd1eb04011a1516d
SSDEEP 3072:l5K/B0toL6SNJSlZHQsozTS+SMqqDL2/TrK1ZG:lcytw/C1yTS+xqqDL6HK+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2240	1108	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-05-25_3f74fb42f6412adc87272c9eee654ae1_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-25_3f74fb42f6412adc87272c9eee654ae1_bkransomware_gandcrab_karagany.exe"
1⤵
PID:1108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1108 -s 264
  2⤵
  - Program crash
  PID:2240

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1108 -ip 1108
1⤵
PID:3616