cd660bd4d4f7d33920a2c18be331041ba80d7770e1c47153a5dfae6da3f5e43e

Submit
Reports

Overview

overview

Static

static

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1.1/Splat.dll

windows10-2004-x64

Crafty-v1....on.dll

windows10-2004-x64

Crafty-v1....es.dll

windows10-2004-x64

Crafty-v1....ve.dll

windows10-2004-x64

Crafty-v1....ta.dll

windows10-2004-x64

Crafty-v1....ol.dll

windows10-2004-x64

Crafty-v1....et.dll

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1....arp.so

windows10-2004-x64

Crafty-v1.....dylib

windows10-2004-x64

Crafty-v1.....dylib

windows10-2004-x64

Crafty-v1.....dylib

windows10-2004-x64

Crafty-v1....on.dll

windows10-2004-x64

Crafty-v1....v2.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....v2.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....v2.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....rp.dll

windows10-2004-x64

Crafty-v1....ts.dll

windows10-2004-x64

Crafty-v1....on.dll

windows10-2004-x64

Crafty-v1....ta.dll

windows10-2004-x64

Analysis

max time kernel
98s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
15-06-2023 05:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

coreentity

2 signatures

Behavioral task

behavioral1

Sample

Crafty-v1.1/SkiaSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral2

Sample

Crafty-v1.1/Splat.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral3

Sample

Crafty-v1.1/System.Drawing.Common.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral4

Sample

Crafty-v1.1/System.IO.Pipelines.dll

Resource

win10v2004-20230221-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral5

Sample

Crafty-v1.1/System.Reactive.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral6

Sample

Crafty-v1.1/System.Security.Cryptography.ProtectedData.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral7

Sample

Crafty-v1.1/Tmds.DBus.Protocol.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral8

Sample

Crafty-v1.1/XboxAuthNet.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral9

Sample

Crafty-v1.1/runtimes/linux-arm/native/libHarfBuzzSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral10

Sample

Crafty-v1.1/runtimes/linux-arm/native/libSkiaSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral11

Sample

Crafty-v1.1/runtimes/linux-arm64/native/libHarfBuzzSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral12

Sample

Crafty-v1.1/runtimes/linux-arm64/native/libSkiaSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral13

Sample

Crafty-v1.1/runtimes/linux-musl-x64/native/libHarfBuzzSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral14

Sample

Crafty-v1.1/runtimes/linux-musl-x64/native/libSkiaSharp.so

Resource

win10v2004-20230221-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral15

Sample

Crafty-v1.1/runtimes/linux-x64/native/libHarfBuzzSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral16

Sample

Crafty-v1.1/runtimes/linux-x64/native/libSkiaSharp.so

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral17

Sample

Crafty-v1.1/runtimes/osx/native/libAvaloniaNative.dylib

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral18

Sample

Crafty-v1.1/runtimes/osx/native/libHarfBuzzSharp.dylib

Resource

win10v2004-20230221-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral19

Sample

Crafty-v1.1/runtimes/osx/native/libSkiaSharp.dylib

Resource

win10v2004-20230220-es

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral20

Sample

Crafty-v1.1/runtimes/unix/lib/net6.0/System.Drawing.Common.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral21

Sample

Crafty-v1.1/runtimes/win-arm64/native/av_libglesv2.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral22

Sample

Crafty-v1.1/runtimes/win-arm64/native/libHarfBuzzSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral23

Sample

Crafty-v1.1/runtimes/win-arm64/native/libSkiaSharp.dll

Resource

win10v2004-20230221-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral24

Sample

Crafty-v1.1/runtimes/win-x64/native/av_libglesv2.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral25

Sample

Crafty-v1.1/runtimes/win-x64/native/libHarfBuzzSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral26

Sample

Crafty-v1.1/runtimes/win-x64/native/libSkiaSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral27

Sample

Crafty-v1.1/runtimes/win-x86/native/av_libglesv2.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

2 signatures

120 seconds

Behavioral task

behavioral28

Sample

Crafty-v1.1/runtimes/win-x86/native/libHarfBuzzSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

2 signatures

120 seconds

Behavioral task

behavioral29

Sample

Crafty-v1.1/runtimes/win-x86/native/libSkiaSharp.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral30

Sample

Crafty-v1.1/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral31

Sample

Crafty-v1.1/runtimes/win/lib/net6.0/System.Drawing.Common.dll

Resource

win10v2004-20230221-es

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral32

Sample

Crafty-v1.1/runtimes/win/lib/netstandard2.0/System.Security.Cryptography.ProtectedData.dll

Resource

win10v2004-20230220-es

windows10-2004-x64

0 signatures

120 seconds

Report Analysis Logs

General

Target

Crafty-v1.1/runtimes/win-x64/native/av_libglesv2.dll
Size

4.2MB
MD5

73d2fb4c35d323813a86e3bf5c85c345
SHA1

81f751a34e0c25bdea93902a19a94a49ce1495df
SHA256

85b3aee47c0e0eaf3a5ea5c75ba8131387a12639b6a0ef280c28531fb77695ae
SHA512

e81677cc9b99ff3d54f67000a60489603e01a896f90c4ef0c883b82e2fdb7b90d2899c078958b3f060a20373b99cb6c4deb7f64cc4c7e0ba2a708209f4684ca4
SSDEEP

49152:I1qISHMa72SRXc0kFg760EvAy4U5hDempTKkslMx0YEQtHhcEIy/rcgcrq8T/2tj:vbMNgMdth1t

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1756 3616 WerFault.exe rundll32.exe

pid	pid_target	process	target process
1756	3616	WerFault.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Crafty-v1.1\runtimes\win-x64\native\av_libglesv2.dll,#1
1⤵
PID:3616

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3616 -s 340
2⤵
- Program crash
PID:1756

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 464 -p 3616 -ip 3616
1⤵
PID:2016

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads