8248ddd1e57851d268458025bab91bb596aed4d558fdadd1dcf4860532d059b8

Analysis

max time kernel
125s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
15/06/2024, 02:25

Target

2024-06-15_8fe4bf69cd74229df4451e64f39f632f_bkransomware_karagany.exe
Size

87KB
MD5

8fe4bf69cd74229df4451e64f39f632f
SHA1

18276dfec0d8dd87f508753273246c6529194c12
SHA256

8248ddd1e57851d268458025bab91bb596aed4d558fdadd1dcf4860532d059b8
SHA512

8268f3b9daa1673f465b04182316a5654a84e7b33c8ad871961c54490b326f9c48dffbe22455f76adb68e95d17a7b2191960f9b3bd4c225b284f8a152a6db917
SSDEEP

1536:Ya1B6VdsY2yesG0bmNmJqJ6qmvE8cw6++sWjcd5aR:BcvNHGfmoJWNZ5a

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
636	1568	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-06-15_8fe4bf69cd74229df4451e64f39f632f_bkransomware_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-15_8fe4bf69cd74229df4451e64f39f632f_bkransomware_karagany.exe"
1⤵
PID:1568
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 244
  2⤵
  - Program crash
  PID:636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1568 -ip 1568
1⤵
PID:3496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1416,i,17949988676391029604,13756926835471203788,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
1⤵
PID:4900