Overview
overview
7Static
static
7AgileDotNe...me.dll
windows10-2004-x64
1ChangeLog.html
windows10-2004-x64
6CraxsRat 3.9.1.exe
windows10-2004-x64
1CraxsRat.exe.xml
windows10-2004-x64
1DrakeUI.Framework.dll
windows10-2004-x64
1GeoIPCitys.dll
windows10-2004-x64
1LiveCharts...ms.dll
windows10-2004-x64
1LiveCharts.Wpf.dll
windows10-2004-x64
1LiveCharts.dll
windows10-2004-x64
1LiveCharts...es.dll
windows10-2004-x64
3LiveChartsRegion.dll
windows10-2004-x64
3MetroSet UI.dll
windows10-2004-x64
1NAudio.dll
windows10-2004-x64
1System.IO....le.dll
windows10-2004-x64
1System.IO....on.dll
windows10-2004-x64
1Vip.Notification.dll
windows10-2004-x64
1WinMM.Net.dll
windows10-2004-x64
1General
-
Target
CraxsRat-V3.9.1.zip
-
Size
64.8MB
-
Sample
230430-mwes4sbb71
-
MD5
c9418260dcbed22f6221a64490dd1137
-
SHA1
b595c2a509ba5075b838a4f73e981472072180a2
-
SHA256
647eb6eaa239f8e109c3ad6ac9a92d4b25f05ee0ded5ef7717aea4e0b430adf3
-
SHA512
7316fc83460f815ca013ad45c16431e7fec3308dc6d322bba1f8f917ffe5b8cfdac6c7f74016c3cefbc183fea0f132e5a395deb935d70a5ec803ff800947544c
-
SSDEEP
786432:Usof2F2PMGoB5RiWVZaBxDbWx0wwyk4YU4okJ4n+XPdMOMG15Ws+g/5t29B4UW6i:2fSz7iWVZuMx0W8PLVMpW5WOMv4wi
Behavioral task
behavioral1
Sample
AgileDotNet.VMRuntime.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
ChangeLog.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
CraxsRat 3.9.1.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
CraxsRat.exe.xml
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
DrakeUI.Framework.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
GeoIPCitys.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LiveCharts.WinForms.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
LiveCharts.Wpf.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LiveCharts.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
LiveChartsCountries.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
LiveChartsRegion.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
MetroSet UI.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NAudio.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
System.IO.Compression.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
Vip.Notification.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
WinMM.Net.dll
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
AgileDotNet.VMRuntime.dll
-
Size
51KB
-
MD5
06f3445fea4baefc85e9bd8132c08340
-
SHA1
016aff2a392a4c5b63d74ec6e3bc0f85ac1a067a
-
SHA256
fd186283d8b31a7605004a4c85ea25042126b8f4bfcb2acf092d9974a647be97
-
SHA512
3eee5f645f1791b82d7baa278dd64911870fed5afc2f4c4044953bed9e0a5598fc8e4339d7e254ad268d72f424b83998902102313c1b08c18962ab4e6ea45507
-
SSDEEP
768:d4gOx89KEARw2a11HI+bvY603JLw8M2DaUBGhvbOikA+4LC/+3oGH:d8EN24HIwQqbvbOikATy+3oGH
Score1/10 -
-
-
Target
ChangeLog.html
-
Size
1KB
-
MD5
e13a142fd65ba98dcd14acab49b75f5c
-
SHA1
5259cc36a8473edab4b5328dd45ba2c0579185cc
-
SHA256
adedda589be1f4181787e5f3453ca48f74f950ba7628099ba217d89fd9eb7f73
-
SHA512
10dfc63549eb15d2bd787f83e5da43a9a2eb34fd9fbc22d10b1015eb0869c3e323db1d49c7338a567105fea9139a04294a51a9f44e2562b703c5c10e07685004
Score6/10-
Drops Chrome extension
-
-
-
Target
CraxsRat 3.9.1.exe
-
Size
58.5MB
-
MD5
410b70652f923b6b3a22bd5adb9b1ff3
-
SHA1
af026551f12a602d95216e74433233595455fabf
-
SHA256
4803f54412bcfdb6563d7f5ceb1104c98137143099ec45aa9c4560d742d9c637
-
SHA512
d06b46dd122704e56694fc3f08a2dc162a88ce79e6539ff71d011af3c9f2b8d0025add3d11c4c0175766f94594181a29abb8ad60f6b25e641acd70adc813d9cb
-
SSDEEP
786432:4sof2F2PMGoB5RiWVZaBxDbWx0wwyk4YU4okJ4n+XPdMOMG15Ws+g/5t29B4UW6:SfSz7iWVZuMx0W8PLVMpW5WOMv4w
Score1/10 -
-
-
Target
CraxsRat.exe.config
-
Size
7KB
-
MD5
f87638ec318fabd7471dcd13057408fd
-
SHA1
d948d6ce8091f3a4e82a261be01e41146d86d09e
-
SHA256
ffce1e0cbbc9efb406b2ac43fcfdae3d6b3cf7b77195649cf416c35bddaddf3c
-
SHA512
1c674b715926bb0f645e4f2b8647dc830463f45f9f2281c6cdebf9d271a7927af52c2cf00e7259c3455fc798b95b2d05d1a034b8b862ffbed3b400562e68c525
-
SSDEEP
96:ur7V7KorTZHyZ90nDP9SbujEBKgFAnuAnznVuupxZAEcHn4abLQAntYIWVv/xWpA:ur7V79rqHm
Score1/10 -
-
-
Target
DrakeUI.Framework.dll
-
Size
1.6MB
-
MD5
0562b4c97f643306df491a938ae636da
-
SHA1
0807c37b711374ed4814a9518c9e264517de89a0
-
SHA256
70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
-
SHA512
c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf
-
SSDEEP
24576:nYyUyUxws47SDJ+wfa3ZsacYwzhmT5LOMobxqFFnM9Pv1w+Fus:nYyUyUueD001YwzhmVSMoNqFF
Score1/10 -
-
-
Target
GeoIPCitys.dll
-
Size
191KB
-
MD5
c070f2421851420e832e4f5989a775a2
-
SHA1
d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46
-
SHA256
d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
-
SHA512
75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e
-
SSDEEP
3072:87IcHKc0TwY4O6BlLiJxTmd9h1+fJ5uJnjpUoh/ht21hYvpMaoySJHPc8E:8dHV0Tn4pox6d9G4k
Score1/10 -
-
-
Target
LiveCharts.WinForms.dll
-
Size
19KB
-
MD5
76c775d09b24798f6923452e920979b5
-
SHA1
3fe2c79512a0d1153fb07f6640b27106c90d333e
-
SHA256
a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad
-
SHA512
eacc093f8ac9401f617df7e07fd68a8a0f1f03aa150283de67ad8c338fcb1520b0f07335547cf533a646ff95f239c92b029f952a706e736bcd9508817c9be0f9
-
SSDEEP
384:F5gNA4m0NkdPbJfGZLifwdNqF8vLvTjzHEhZFUPOxFBVGquJpQ76RqMm:F5gNnrNklJfGZLiAw27jrEhZFyYMm
Score1/10 -
-
-
Target
LiveCharts.Wpf.dll
-
Size
212KB
-
MD5
e924f79f0b5f3e79c98477d75831813d
-
SHA1
64f71e20e1953b13c771d8a8e63549ad6d64216e
-
SHA256
1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
-
SHA512
063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1
-
SSDEEP
6144:d/vd0eaDQcUc0GkiTV3bkACA3AloBtefVt+aA2xgKPo1zlW1w:vaErjGkiTV3bkACA3AloBtefVt+aAGBF
Score1/10 -
-
-
Target
LiveCharts.dll
-
Size
148KB
-
MD5
9642899636959b7fc89bf34a8b998a90
-
SHA1
479a0254d1c9e5565c7d861bb77f54b7eae50c96
-
SHA256
9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
-
SHA512
435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2
-
SSDEEP
3072:saegvMNVoz3Vlw6/R3z3MV1IdJJGVKWHC2KdxFFT9lzo:VFJlwYMVWY65z
Score1/10 -
-
-
Target
LiveChartsCountries.dll
-
Size
59KB
-
MD5
740659d4411bcf877f27217a2710b874
-
SHA1
9df5c0d033e49026995e846fe27e1ab4955d43b1
-
SHA256
f6e951697226a85e8ad11578a20a0de8c1923afbc69dfce3f0e10ea823d54c1a
-
SHA512
96d810233dc40915d06c9adf6f49a62be8321a0ea6ace3c139922272dcf543e48b041b341694c126727e37e7a4ca1bd4ba7395ca18d998f629e87aa409c36b37
-
SSDEEP
1536:E3VBdmmdVR/GF3VZC/owI8bbS56VX1xPzSoE3xy:EFDht/GF3VZC/xdu6VlxPzhIxy
Score3/10 -
-
-
Target
LiveChartsRegion.dll
-
Size
59KB
-
MD5
0d4672955cddebc60cdc5cb0510294d8
-
SHA1
8cad08e2fb925656bf7f70f954874f661d2fe32e
-
SHA256
e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc
-
SHA512
45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7
-
SSDEEP
1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O
Score3/10 -
-
-
Target
MetroSet UI.dll
-
Size
444KB
-
MD5
d99a97de55b2561e57135433b44bb786
-
SHA1
ab588b8d36683b52adcb32c03a9859b884838f29
-
SHA256
6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
-
SHA512
7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
-
SSDEEP
6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
Score1/10 -
-
-
Target
NAudio.dll
-
Size
498KB
-
MD5
6ca17abccae3050f391401b2955f9333
-
SHA1
0975b039a793accb58130d6639262cd291d80d5d
-
SHA256
3ad5d09b4c8c3146d15955a564a9f1a57d7c795b189a25c6f722a738d95ef89c
-
SHA512
c08f366aae9baf0e7762f47a2f79d0dee5187a1d7631e5838590b7c12911bdeb6247e0ff860ade36e04f1d6717f919ad98df6d3a1a556bff4b8994db9616ccec
-
SSDEEP
12288:MnXnae2TPlr3zvzar5oRDaw92wP6mai9gs6C:K8lrT+r5ADakP4i9gs
Score1/10 -
-
-
Target
System.IO.Compression.ZipFile.dll
-
Size
24KB
-
MD5
dcda916372128f13ada8b07026c1b3e7
-
SHA1
99d6c187de8510206a93d2eed9c65e65e0c86e72
-
SHA256
b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
-
SHA512
d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
-
SSDEEP
384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
Score1/10 -
-
-
Target
System.IO.Compression.dll
-
Size
55KB
-
MD5
dc852942e3fda3284b7a213a4a0c61a9
-
SHA1
4b042f43eb249309a398390757f671cffd26056e
-
SHA256
7512939c42ca6eca7afab25ae5c5891d046bcb2c689c73d7aebf634618afa824
-
SHA512
ec8e5b659f18592d4c9dc81e899309d2883b9d67f139d625b1f8fbd563465603279ce1e0fcde05b1712372503f3dbbe4d6a05165260a349925db5f2b7035fe79
-
SSDEEP
768:V4gOx89iNkRw2B11HI+bAeg603JLw8Mi9wt8AQfaKKP2kYlevy1eh0B/z:VQNh2BHIwqFlCKYYIU+0B/z
Score1/10 -
-
-
Target
Vip.Notification.dll
-
Size
17KB
-
MD5
a292d382f369373d6a925fe5907c69c9
-
SHA1
7336065527d93566f79121c478545ae86ba8bb2e
-
SHA256
ec7dc8e7890b3881e0a6f8616c7363d4fb43b9c5af2c090b08bbe0275031a6d7
-
SHA512
9f45240686f506b11dbce466dd8b843683e09ff3896bc6563a6580d531898f60523614295c62556a5e058af5af18c3e98e80b3f0642f49f07dd2dc44a181dfdc
-
SSDEEP
384:EDkSAZXF8SniyHUX4ICx3Fs9SqVW4z5QdfVASCFCDOtfgTuokwuwAqu05yokwOwG:ED8fR4tQsNFLfgvuPIOjk7ch
Score1/10 -
-
-
Target
WinMM.Net.dll
-
Size
43KB
-
MD5
d4b80052c7b4093e10ce1f40ce74f707
-
SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697
-
SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
-
SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
-
SSDEEP
768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
Score1/10 -