647eb6eaa239f8e109c3ad6ac9a92d4b25f05ee0ded5ef7717aea4e0b430adf3

Sharing

Copy URL

Twitter E-mail

General

Target

CraxsRat-V3.9.1.zip
Size

64.8MB
Sample

230430-mwes4sbb71
MD5

c9418260dcbed22f6221a64490dd1137
SHA1

b595c2a509ba5075b838a4f73e981472072180a2
SHA256

647eb6eaa239f8e109c3ad6ac9a92d4b25f05ee0ded5ef7717aea4e0b430adf3
SHA512

7316fc83460f815ca013ad45c16431e7fec3308dc6d322bba1f8f917ffe5b8cfdac6c7f74016c3cefbc183fea0f132e5a395deb935d70a5ec803ff800947544c
SSDEEP

786432:Usof2F2PMGoB5RiWVZaBxDbWx0wwyk4YU4okJ4n+XPdMOMG15Ws+g/5t29B4UW6i:2fSz7iWVZuMx0W8PLVMpW5WOMv4wi

Score

7^/10

agilenet

Malware Config

Targets

- Target
  
  AgileDotNet.VMRuntime.dll
- Size
  
  51KB
- MD5
  
  06f3445fea4baefc85e9bd8132c08340
- SHA1
  
  016aff2a392a4c5b63d74ec6e3bc0f85ac1a067a
- SHA256
  
  fd186283d8b31a7605004a4c85ea25042126b8f4bfcb2acf092d9974a647be97
- SHA512
  
  3eee5f645f1791b82d7baa278dd64911870fed5afc2f4c4044953bed9e0a5598fc8e4339d7e254ad268d72f424b83998902102313c1b08c18962ab4e6ea45507
- SSDEEP
  
  768:d4gOx89KEARw2a11HI+bvY603JLw8M2DaUBGhvbOikA+4LC/+3oGH:d8EN24HIwQqbvbOikATy+3oGH
Score

1^/10
behavioral1
- Target
  
  ChangeLog.html
- Size
  
  1KB
- MD5
  
  e13a142fd65ba98dcd14acab49b75f5c
- SHA1
  
  5259cc36a8473edab4b5328dd45ba2c0579185cc
- SHA256
  
  adedda589be1f4181787e5f3453ca48f74f950ba7628099ba217d89fd9eb7f73
- SHA512
  
  10dfc63549eb15d2bd787f83e5da43a9a2eb34fd9fbc22d10b1015eb0869c3e323db1d49c7338a567105fea9139a04294a51a9f44e2562b703c5c10e07685004
Score

6^/10
- Drops Chrome extension
behavioral2
- Target
  
  CraxsRat 3.9.1.exe
- Size
  
  58.5MB
- MD5
  
  410b70652f923b6b3a22bd5adb9b1ff3
- SHA1
  
  af026551f12a602d95216e74433233595455fabf
- SHA256
  
  4803f54412bcfdb6563d7f5ceb1104c98137143099ec45aa9c4560d742d9c637
- SHA512
  
  d06b46dd122704e56694fc3f08a2dc162a88ce79e6539ff71d011af3c9f2b8d0025add3d11c4c0175766f94594181a29abb8ad60f6b25e641acd70adc813d9cb
- SSDEEP
  
  786432:4sof2F2PMGoB5RiWVZaBxDbWx0wwyk4YU4okJ4n+XPdMOMG15Ws+g/5t29B4UW6:SfSz7iWVZuMx0W8PLVMpW5WOMv4w
Score

1^/10
behavioral3
- Target
  
  CraxsRat.exe.config
- Size
  
  7KB
- MD5
  
  f87638ec318fabd7471dcd13057408fd
- SHA1
  
  d948d6ce8091f3a4e82a261be01e41146d86d09e
- SHA256
  
  ffce1e0cbbc9efb406b2ac43fcfdae3d6b3cf7b77195649cf416c35bddaddf3c
- SHA512
  
  1c674b715926bb0f645e4f2b8647dc830463f45f9f2281c6cdebf9d271a7927af52c2cf00e7259c3455fc798b95b2d05d1a034b8b862ffbed3b400562e68c525
- SSDEEP
  
  96:ur7V7KorTZHyZ90nDP9SbujEBKgFAnuAnznVuupxZAEcHn4abLQAntYIWVv/xWpA:ur7V79rqHm
Score

1^/10
behavioral4
- Target
  
  DrakeUI.Framework.dll
- Size
  
  1.6MB
- MD5
  
  0562b4c97f643306df491a938ae636da
- SHA1
  
  0807c37b711374ed4814a9518c9e264517de89a0
- SHA256
  
  70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
- SHA512
  
  c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf
- SSDEEP
  
  24576:nYyUyUxws47SDJ+wfa3ZsacYwzhmT5LOMobxqFFnM9Pv1w+Fus:nYyUyUueD001YwzhmVSMoNqFF
Score

1^/10
behavioral5
- Target
  
  GeoIPCitys.dll
- Size
  
  191KB
- MD5
  
  c070f2421851420e832e4f5989a775a2
- SHA1
  
  d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46
- SHA256
  
  d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
- SHA512
  
  75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e
- SSDEEP
  
  3072:87IcHKc0TwY4O6BlLiJxTmd9h1+fJ5uJnjpUoh/ht21hYvpMaoySJHPc8E:8dHV0Tn4pox6d9G4k
Score

1^/10
behavioral6
- Target
  
  LiveCharts.WinForms.dll
- Size
  
  19KB
- MD5
  
  76c775d09b24798f6923452e920979b5
- SHA1
  
  3fe2c79512a0d1153fb07f6640b27106c90d333e
- SHA256
  
  a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad
- SHA512
  
  eacc093f8ac9401f617df7e07fd68a8a0f1f03aa150283de67ad8c338fcb1520b0f07335547cf533a646ff95f239c92b029f952a706e736bcd9508817c9be0f9
- SSDEEP
  
  384:F5gNA4m0NkdPbJfGZLifwdNqF8vLvTjzHEhZFUPOxFBVGquJpQ76RqMm:F5gNnrNklJfGZLiAw27jrEhZFyYMm
Score

1^/10
behavioral7
- Target
  
  LiveCharts.Wpf.dll
- Size
  
  212KB
- MD5
  
  e924f79f0b5f3e79c98477d75831813d
- SHA1
  
  64f71e20e1953b13c771d8a8e63549ad6d64216e
- SHA256
  
  1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
- SHA512
  
  063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1
- SSDEEP
  
  6144:d/vd0eaDQcUc0GkiTV3bkACA3AloBtefVt+aA2xgKPo1zlW1w:vaErjGkiTV3bkACA3AloBtefVt+aAGBF
Score

1^/10
behavioral8
- Target
  
  LiveCharts.dll
- Size
  
  148KB
- MD5
  
  9642899636959b7fc89bf34a8b998a90
- SHA1
  
  479a0254d1c9e5565c7d861bb77f54b7eae50c96
- SHA256
  
  9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
- SHA512
  
  435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2
- SSDEEP
  
  3072:saegvMNVoz3Vlw6/R3z3MV1IdJJGVKWHC2KdxFFT9lzo:VFJlwYMVWY65z
Score

1^/10
behavioral9
- Target
  
  LiveChartsCountries.dll
- Size
  
  59KB
- MD5
  
  740659d4411bcf877f27217a2710b874
- SHA1
  
  9df5c0d033e49026995e846fe27e1ab4955d43b1
- SHA256
  
  f6e951697226a85e8ad11578a20a0de8c1923afbc69dfce3f0e10ea823d54c1a
- SHA512
  
  96d810233dc40915d06c9adf6f49a62be8321a0ea6ace3c139922272dcf543e48b041b341694c126727e37e7a4ca1bd4ba7395ca18d998f629e87aa409c36b37
- SSDEEP
  
  1536:E3VBdmmdVR/GF3VZC/owI8bbS56VX1xPzSoE3xy:EFDht/GF3VZC/xdu6VlxPzhIxy
Score

3^/10
behavioral10
- Target
  
  LiveChartsRegion.dll
- Size
  
  59KB
- MD5
  
  0d4672955cddebc60cdc5cb0510294d8
- SHA1
  
  8cad08e2fb925656bf7f70f954874f661d2fe32e
- SHA256
  
  e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc
- SHA512
  
  45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7
- SSDEEP
  
  1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O
Score

3^/10
behavioral11
- Target
  
  MetroSet UI.dll
- Size
  
  444KB
- MD5
  
  d99a97de55b2561e57135433b44bb786
- SHA1
  
  ab588b8d36683b52adcb32c03a9859b884838f29
- SHA256
  
  6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
- SHA512
  
  7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
- SSDEEP
  
  6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
Score

1^/10
behavioral12
- Target
  
  NAudio.dll
- Size
  
  498KB
- MD5
  
  6ca17abccae3050f391401b2955f9333
- SHA1
  
  0975b039a793accb58130d6639262cd291d80d5d
- SHA256
  
  3ad5d09b4c8c3146d15955a564a9f1a57d7c795b189a25c6f722a738d95ef89c
- SHA512
  
  c08f366aae9baf0e7762f47a2f79d0dee5187a1d7631e5838590b7c12911bdeb6247e0ff860ade36e04f1d6717f919ad98df6d3a1a556bff4b8994db9616ccec
- SSDEEP
  
  12288:MnXnae2TPlr3zvzar5oRDaw92wP6mai9gs6C:K8lrT+r5ADakP4i9gs
Score

1^/10
behavioral13
- Target
  
  System.IO.Compression.ZipFile.dll
- Size
  
  24KB
- MD5
  
  dcda916372128f13ada8b07026c1b3e7
- SHA1
  
  99d6c187de8510206a93d2eed9c65e65e0c86e72
- SHA256
  
  b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
- SHA512
  
  d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
- SSDEEP
  
  384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
Score

1^/10
behavioral14
- Target
  
  System.IO.Compression.dll
- Size
  
  55KB
- MD5
  
  dc852942e3fda3284b7a213a4a0c61a9
- SHA1
  
  4b042f43eb249309a398390757f671cffd26056e
- SHA256
  
  7512939c42ca6eca7afab25ae5c5891d046bcb2c689c73d7aebf634618afa824
- SHA512
  
  ec8e5b659f18592d4c9dc81e899309d2883b9d67f139d625b1f8fbd563465603279ce1e0fcde05b1712372503f3dbbe4d6a05165260a349925db5f2b7035fe79
- SSDEEP
  
  768:V4gOx89iNkRw2B11HI+bAeg603JLw8Mi9wt8AQfaKKP2kYlevy1eh0B/z:VQNh2BHIwqFlCKYYIU+0B/z
Score

1^/10
behavioral15
- Target
  
  Vip.Notification.dll
- Size
  
  17KB
- MD5
  
  a292d382f369373d6a925fe5907c69c9
- SHA1
  
  7336065527d93566f79121c478545ae86ba8bb2e
- SHA256
  
  ec7dc8e7890b3881e0a6f8616c7363d4fb43b9c5af2c090b08bbe0275031a6d7
- SHA512
  
  9f45240686f506b11dbce466dd8b843683e09ff3896bc6563a6580d531898f60523614295c62556a5e058af5af18c3e98e80b3f0642f49f07dd2dc44a181dfdc
- SSDEEP
  
  384:EDkSAZXF8SniyHUX4ICx3Fs9SqVW4z5QdfVASCFCDOtfgTuokwuwAqu05yokwOwG:ED8fR4tQsNFLfgvuPIOjk7ch
Score

1^/10
behavioral16
- Target
  
  WinMM.Net.dll
- Size
  
  43KB
- MD5
  
  d4b80052c7b4093e10ce1f40ce74f707
- SHA1
  
  2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA256
  
  59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- SHA512
  
  3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP
  
  768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
Score

1^/10
behavioral17

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17