60a2b9b905c74f4b4a128758ebf1ce5321f70f972a7f877f35da0c2d52c6ac52

Analysis

max time kernel
113s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 06:30

Target

2024-05-27_605d7e3e4a7be56c8c56be744579b7eb_bkransomware_gandcrab_karagany.exe
Size

143KB
MD5

605d7e3e4a7be56c8c56be744579b7eb
SHA1

3f762e6d2e89388babbb1ce705610dc9ab2230b3
SHA256

60a2b9b905c74f4b4a128758ebf1ce5321f70f972a7f877f35da0c2d52c6ac52
SHA512

13b0cde9b9c713fd1382376ebc64c8f1547232a5191e7c0782558607d9b38573eac6a6ed0b1ed41944b6840ec72f51f32ef98a2d92269a36661552c1cfcde162
SSDEEP

3072:o+HcL2ICfoTntqSQRruiMZMqqDL2/Awvdi7Vjp9:hwDtORruiMyqqDL6tvdop9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4124	1836	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-05-27_605d7e3e4a7be56c8c56be744579b7eb_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-27_605d7e3e4a7be56c8c56be744579b7eb_bkransomware_gandcrab_karagany.exe"
1⤵
PID:1836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1836 -s 264
  2⤵
  - Program crash
  PID:4124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1836 -ip 1836
1⤵
PID:1116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1028 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
1⤵
PID:1696