PwC interview question

How Do you analyse a Crabb Ransomware?