Overview
overview
7Static
static
7Accord.Vid...64.dll
windows10-2004-x64
1Accord.Video.dll
windows10-2004-x64
1Accord.dll
windows10-2004-x64
1ChangeLog.html
windows10-2004-x64
6CraxsRat v4.5.3.exe
windows10-2004-x64
1CraxsRat.exe.xml
windows10-2004-x64
1DrakeUI.Framework.dll
windows10-2004-x64
1GeoIPCitys.dll
windows10-2004-x64
1LiveCharts.MAPS.dll
windows10-2004-x64
1LiveCharts...ms.dll
windows10-2004-x64
1LiveCharts.Wpf.dll
windows10-2004-x64
1LiveCharts.dll
windows10-2004-x64
1LiveCharts...es.dll
windows10-2004-x64
3LiveChartsRegion.dll
windows10-2004-x64
3MetroSet UI.dll
windows10-2004-x64
1NAudio.dll
windows10-2004-x64
1System.IO....le.dll
windows10-2004-x64
1System.IO....on.dll
windows10-2004-x64
1Vip.Notification.dll
windows10-2004-x64
1WinMM.Net.dll
windows10-2004-x64
1avcodec-57.dll
windows10-2004-x64
3avdevice-57.dll
windows10-2004-x64
3avfilter-6.dll
windows10-2004-x64
1avformat-57.dll
windows10-2004-x64
3avutil-55.dll
windows10-2004-x64
3postproc-54.dll
windows10-2004-x64
1swresample-2.dll
windows10-2004-x64
1swscale-4.dll
windows10-2004-x64
3Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
05-05-2023 22:59
Behavioral task
behavioral1
Sample
Accord.Video.FFMPEG.x64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
Accord.Video.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Accord.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral4
Sample
ChangeLog.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
CraxsRat v4.5.3.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
CraxsRat.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
DrakeUI.Framework.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
GeoIPCitys.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LiveCharts.MAPS.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
LiveCharts.WinForms.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
LiveCharts.Wpf.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
LiveCharts.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
LiveChartsCountries.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
LiveChartsRegion.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
MetroSet UI.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
NAudio.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral18
Sample
System.IO.Compression.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Vip.Notification.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral20
Sample
WinMM.Net.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
avcodec-57.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral22
Sample
avdevice-57.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
avfilter-6.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral24
Sample
avformat-57.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
avutil-55.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral26
Sample
postproc-54.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral27
Sample
swresample-2.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral28
Sample
swscale-4.dll
Resource
win10v2004-20230220-en
General
-
Target
avcodec-57.dll
-
Size
26.4MB
-
MD5
f203d1a907e2fcb253347e86369c10f4
-
SHA1
3fd4ad54af5413b9305b741d736dfe3ad6d177f9
-
SHA256
d9c3b37b31ae292465fb62e13acee284d64396f883f6dff9a3d50f1acd3e55fc
-
SHA512
60ac5932172394b62c496fa8ee7ddcda71fe003248c77c0bfcb99424dc76d373082b5124e7ec99edb7bdbfa8277688d27fe6d543a9f0de5a060fb4df6b167120
-
SSDEEP
196608:imQoJcYPNCZ3AEtLa0z6c+/ix0FuIbOW9uGYcd7cpPDK1VLIjHP:Z303HBD+/tFuIbHYcd7cp2HU
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4592 2668 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\avcodec-57.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2668 -s 3522⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 2668 -ip 26681⤵