General

  • Target

    CraxsRat v4.5.3 clean.zip

  • Size

    58.3MB

  • MD5

    218552a77da64889f279c1c49736f8e8

  • SHA1

    63512bcc1e63a345c534a708c3ceace33868e9b7

  • SHA256

    0a06fb2cbb200a1ab76de4b4e5fe2284932b0c65707ab304921ea2d739ea90da

  • SHA512

    f5a932d4596552b2a866cf0fe75f8408a60b0e6d34b47d4a9413f06d90489ff9476d915c109df973b57bf0340cde4ab4cebb2faeb7ce851844505af8cf87877d

  • SSDEEP

    1572864:lXteW9rl1rsR6PyezygmS84sNjDEZTRtAO7oy2p+hkv:/v9xc6PoghLAjQF7KpH

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 2 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • CraxsRat v4.5.3 clean.zip
    .zip
  • Accord.Video.FFMPEG.x64.dll
    .dll windows x64

    9890e10c1b899c00509127a783a28c50


    Headers

    Imports

    Sections

  • Accord.Video.FFMPEG.x64.xml
    .xml .vbs
  • Accord.Video.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Accord.Video.xml
    .xml .vbs
  • Accord.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Accord.dll.config
  • Accord.xml
    .xml
  • ChangeLog.html
  • CraxsRat v4.5.3.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • CraxsRat.exe.config
    .xml
  • CraxsRat.pdb
  • CraxsRat.xml
  • DrakeUI.Framework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Errorlogs.txt
  • GeoIPCitys.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • License.xml
  • LiveCharts.MAPS.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LiveCharts.WinForms.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LiveCharts.WinForms.pdb
  • LiveCharts.WinForms.xml
    .xml
  • LiveCharts.Wpf.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LiveCharts.Wpf.pdb
  • LiveCharts.Wpf.xml
    .xml
  • LiveCharts.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LiveCharts.pdb
  • LiveCharts.xml
    .xml
  • LiveChartsCountries.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • LiveChartsRegion.dll
    .dll windows x64

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • MetroSet UI.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.IO.Compression.ZipFile.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.IO.Compression.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Vip.Notification.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • WinMM.Net.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • World.xml
  • avcodec-57.dll
    .dll windows x64

    07ebb2e4a85e7279af867aeba248f826


    Headers

    Imports

    Exports

    Sections

  • avdevice-57.dll
    .dll windows x64

    74a3a90b5539069c4beae5c1ff67eeeb


    Headers

    Imports

    Exports

    Sections

  • avfilter-6.dll
    .dll windows x64

    cc82914ed4060a17f274315a75957af2


    Headers

    Imports

    Exports

    Sections

  • avformat-57.dll
    .dll windows x64

    dcdaea73f83fa4f3ccf4a73a42eca2d4


    Headers

    Imports

    Exports

    Sections

  • avutil-55.dll
    .dll windows x64

    e241b1afb3acc147e63f8a48c1220fe7


    Headers

    Imports

    Exports

    Sections

  • postproc-54.dll
    .dll windows x64

    7bb87fee6154df19a72c97736e5d0651


    Headers

    Imports

    Exports

    Sections

  • swresample-2.dll
    .dll windows x64

    f06c43747311dda7e72aeaac232e98cd


    Headers

    Imports

    Exports

    Sections

  • swscale-4.dll
    .dll windows x64

    4bccf1a398f2c0396c724833732fcf53


    Headers

    Imports

    Exports

    Sections