f1bf18e2a1c39b27fdbefa20fa4d0b6ee5b282129b08e9fb7e373a4d337e8669

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 18:58

Target
2024-05-31_4a345b97aadccb630c579e6527a3c6f2_bkransomware_gandcrab_karagany.exe
Size 155KB
Sample240531-xmlkeaad94
SHA256 f1bf18e2a1c39b27fdbefa20fa4d0b6ee5b282129b08e9fb7e373a4d337e8669
MD5 4a345b97aadccb630c579e6527a3c6f2
SHA1 aa734616a5d82a5ed96a2abf9edb8a95a259cfea
SHA512 dbb7335b0f3bc00fb2d05954b4f14ee07eb0dbcdd8451d709aa3360964192c13307ff6e9bd55222a4411c7b35d19c2e8275087653bd142c43dff93ea04463b7d
SSDEEP 3072:l5K/B0toLQSNJslZHQsozTS+SMqqDL2/TrK4GG:lcytwts1yTS+xqqDL6HKc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2968	1484	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2024-05-31_4a345b97aadccb630c579e6527a3c6f2_bkransomware_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-31_4a345b97aadccb630c579e6527a3c6f2_bkransomware_gandcrab_karagany.exe"
1⤵
PID:1484
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 264
  2⤵
  - Program crash
  PID:2968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1484 -ip 1484
1⤵
PID:2372