General

  • Target

    Crafty-v1.1.zip

  • Size

    69.2MB

  • MD5

    fd1145f91ae9d87b74b8e399dd9461e7

  • SHA1

    f3690e361f3b7d7144da2026890fdc2ceae60063

  • SHA256

    cd660bd4d4f7d33920a2c18be331041ba80d7770e1c47153a5dfae6da3f5e43e

  • SHA512

    015c5a12f37f98f7a18c4c798c4906e5d0ab4e1dfd11bd96bcc3a10f993bd4f2d5e741d34052253e58d82badb41678c7379e2ee59ff8e004f772290777d8ac79

  • SSDEEP

    1572864:OFOQ68XYZqaTas246+IovI9fQfaPohC9BjoKisNZo8E03+jbPOi6yV3/CDH1KcDw:OFOX8oDas2J+XsYZhMr3ZoT/PgFDVLUz

Score
9/10

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • Crafty-v1.1.zip
    .zip
  • Crafty-v1.1/Avalonia.Base.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Controls.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.DesignerSupport.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Desktop.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Dialogs.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.FreeDesktop.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Markup.Xaml.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Markup.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.MicroCom.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Native.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.OpenGL.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.ReactiveUI.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Remote.Protocol.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Skia.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Themes.Fluent.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.Win32.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.X11.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Avalonia.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/BouncyCastle.Crypto.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/CmlLib.Core.Auth.Microsoft.MsalClient.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/CmlLib.Core.Auth.Microsoft.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/CmlLib.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Crafty.deps.json
  • Crafty-v1.1/Crafty.dll
    .exe windows x64


    Headers

    Sections

  • Crafty-v1.1/Crafty.exe
    .exe windows x64

    78da59308ee0088a874b4a6cdd7d91bd


    Headers

    Imports

    Sections

  • Crafty-v1.1/Crafty.pdb
  • Crafty-v1.1/Crafty.runtimeconfig.json
  • Crafty-v1.1/CurseForge.APIClient.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Downloader.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/DynamicData.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/HarfBuzzSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/ICSharpCode.SharpZipLib.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/MicroCom.Runtime.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.DependencyInjection.Abstractions.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.DependencyInjection.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.Http.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.Logging.Abstractions.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.Logging.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.Options.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Extensions.Primitives.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Identity.Client.Extensions.Msal.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Identity.Client.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Microsoft.Win32.SystemEvents.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Modrinth.Net.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/ReactiveUI.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/SevenZip.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/SkiaSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Splat.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/System.Drawing.Common.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/System.IO.Pipelines.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/System.Reactive.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/System.Security.Cryptography.ProtectedData.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/Tmds.DBus.Protocol.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/XboxAuthNet.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Crafty-v1.1/runtimes/linux-arm/native/libHarfBuzzSharp.so
    .elf linux arm
  • Crafty-v1.1/runtimes/linux-arm/native/libSkiaSharp.so
    .elf linux arm
  • Crafty-v1.1/runtimes/linux-arm64/native/libHarfBuzzSharp.so
    .elf linux aarch64
  • Crafty-v1.1/runtimes/linux-arm64/native/libSkiaSharp.so
    .elf linux aarch64
  • Crafty-v1.1/runtimes/linux-musl-x64/native/libHarfBuzzSharp.so
    .elf linux x64
  • Crafty-v1.1/runtimes/linux-musl-x64/native/libSkiaSharp.so
    .elf linux x64
  • Crafty-v1.1/runtimes/linux-x64/native/libHarfBuzzSharp.so
    .elf linux x64
  • Crafty-v1.1/runtimes/linux-x64/native/libSkiaSharp.so
    .elf linux x64
  • Crafty-v1.1/runtimes/osx/native/libAvaloniaNative.dylib
    .macho macos
  • Crafty-v1.1/runtimes/osx/native/libHarfBuzzSharp.dylib
    .macho macos
  • Crafty-v1.1/runtimes/osx/native/libSkiaSharp.dylib
    .macho macos
  • Crafty-v1.1/runtimes/unix/lib/net6.0/System.Drawing.Common.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/runtimes/win-arm64/native/av_libglesv2.dll
  • Crafty-v1.1/runtimes/win-arm64/native/libHarfBuzzSharp.dll
  • Crafty-v1.1/runtimes/win-arm64/native/libSkiaSharp.dll
  • Crafty-v1.1/runtimes/win-x64/native/av_libglesv2.dll
    .dll windows x64

    1dac4bcc7f887f5e7dbadabe4ccef676


    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win-x64/native/libHarfBuzzSharp.dll
    .dll windows x64

    24746f1e7a3f00835993ed8d16f1ef5f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win-x64/native/libSkiaSharp.dll
    .dll windows x64

    ffe661c0b06e35c1f2a6559c922e2926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win-x86/native/av_libglesv2.dll
    .dll windows x86

    605cb46ba88b71b6073c925d1e2079a6


    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win-x86/native/libHarfBuzzSharp.dll
    .dll windows x86

    cdbe2fcaf2cc77d2bee82ac1959c419f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win-x86/native/libSkiaSharp.dll
    .dll windows x86

    cf9096988d0d81a64607a1649f18073d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crafty-v1.1/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/runtimes/win/lib/net6.0/System.Drawing.Common.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Crafty-v1.1/runtimes/win/lib/netstandard2.0/System.Security.Cryptography.ProtectedData.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections