Overview
overview
7Static
static
7AgileDotNe...me.dll
windows10-2004-x64
1ChangeLog.html
windows10-2004-x64
6CraxsRat 3.9.1.exe
windows10-2004-x64
1CraxsRat.exe.xml
windows10-2004-x64
1DrakeUI.Framework.dll
windows10-2004-x64
1GeoIPCitys.dll
windows10-2004-x64
1LiveCharts...ms.dll
windows10-2004-x64
1LiveCharts.Wpf.dll
windows10-2004-x64
1LiveCharts.dll
windows10-2004-x64
1LiveCharts...es.dll
windows10-2004-x64
3LiveChartsRegion.dll
windows10-2004-x64
3MetroSet UI.dll
windows10-2004-x64
1NAudio.dll
windows10-2004-x64
1System.IO....le.dll
windows10-2004-x64
1System.IO....on.dll
windows10-2004-x64
1Vip.Notification.dll
windows10-2004-x64
1WinMM.Net.dll
windows10-2004-x64
1Analysis
-
max time kernel
113s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
30-04-2023 10:48
Behavioral task
behavioral1
Sample
AgileDotNet.VMRuntime.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
ChangeLog.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
CraxsRat 3.9.1.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
CraxsRat.exe.xml
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
DrakeUI.Framework.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
GeoIPCitys.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LiveCharts.WinForms.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
LiveCharts.Wpf.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LiveCharts.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
LiveChartsCountries.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
LiveChartsRegion.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
MetroSet UI.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NAudio.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
System.IO.Compression.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
Vip.Notification.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
WinMM.Net.dll
Resource
win10v2004-20230220-en
General
-
Target
CraxsRat 3.9.1.exe
-
Size
58.5MB
-
MD5
410b70652f923b6b3a22bd5adb9b1ff3
-
SHA1
af026551f12a602d95216e74433233595455fabf
-
SHA256
4803f54412bcfdb6563d7f5ceb1104c98137143099ec45aa9c4560d742d9c637
-
SHA512
d06b46dd122704e56694fc3f08a2dc162a88ce79e6539ff71d011af3c9f2b8d0025add3d11c4c0175766f94594181a29abb8ad60f6b25e641acd70adc813d9cb
-
SSDEEP
786432:4sof2F2PMGoB5RiWVZaBxDbWx0wwyk4YU4okJ4n+XPdMOMG15Ws+g/5t29B4UW6:SfSz7iWVZuMx0W8PLVMpW5WOMv4w
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
CraxsRat 3.9.1.exepid process 1496 CraxsRat 3.9.1.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
CraxsRat 3.9.1.exepid process 1496 CraxsRat 3.9.1.exe