Analysis
-
max time kernel
136s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
25-05-2024 21:05
Behavioral task
behavioral1
Sample
20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe
-
Size
139KB
-
MD5
030a37a4fcd7ab0589153da356debf25
-
SHA1
35f94d32cd61329996fc65f4ba3a94d86262944c
-
SHA256
cec908909002b6bc46b7d98aeb908cb5e94de9f6cd8544772a6cb860b50bafa6
-
SHA512
8d7fe7c71d4d536fbf0171ba978a4bb6c5393e5e8e3376ce00b948609d4392277f6278fe2296e0e7824537aa20a3cea99b93e4dc76fd9e49bf00d6c1461dc4c3
-
SSDEEP
3072:IRDukUiIuqQHCVT9NwoPsaMqqDL2/OgvduI:IRDfgBVwoPsJqqDL6PvduI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2808 4796 WerFault.exe 20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe"C:\Users\Admin\AppData\Local\Temp\20240524030a37a4fcd7ab0589153da356debf25bkransomwaregandcrabkaragany.exe"1⤵PID:4796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4796 -s 2202⤵
- Program crash
PID:2808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4796 -ip 47961⤵PID:3180