PwC Interview Question

How Do you analyse a Crabb Ransomware?