1dc5849434031262a736a4a143ac2b9ee1ac2dc72cb0ba187b4296cb80d04dee

Analysis

max time kernel
129s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 22:18

Target
20240527928995bb5979aa5a78efcced083ee444bkransomwaregandcrabkaragany.exe
Size 141KB
Sample240527-174hhadb59
SHA256 1dc5849434031262a736a4a143ac2b9ee1ac2dc72cb0ba187b4296cb80d04dee
MD5 928995bb5979aa5a78efcced083ee444
SHA1 6cbbe679a51792d7d75b6f6d46c2c817ad1933dc
SHA512 3c1220efd21ad6b2ec66607541e3f4821b9b43140cd08373e16d9e9a027f27e5a6df2dd5f4591b19f2c2c679e45847f531e340c808c01c432763de525e83669e
SSDEEP 3072:m5tmM+mBqQH8Us4QL1nMqqDL2/OPvdli:m5t3yj4QL1MqqDL6svdli
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2988	2364	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\20240527928995bb5979aa5a78efcced083ee444bkransomwaregandcrabkaragany.exe
"C:\Users\Admin\AppData\Local\Temp\20240527928995bb5979aa5a78efcced083ee444bkransomwaregandcrabkaragany.exe"
1⤵
PID:2364
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2364 -s 220
  2⤵
  - Program crash
  PID:2988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2364 -ip 2364
1⤵
PID:2708