Overview
overview
7Static
static
7CraxsRat_V...g.html
windows7-x64
1CraxsRat_V...g.html
windows10-2004-x64
1CraxsRat_V....7.exe
windows7-x64
1CraxsRat_V....7.exe
windows10-2004-x64
1CraxsRat_V...rk.dll
windows7-x64
1CraxsRat_V...rk.dll
windows10-2004-x64
1CraxsRat_V...ys.dll
windows7-x64
1CraxsRat_V...ys.dll
windows10-2004-x64
1CraxsRat_V...64.dll
windows7-x64
1CraxsRat_V...64.dll
windows10-2004-x64
1CraxsRat_V...tm.dll
windows7-x64
1CraxsRat_V...tm.dll
windows10-2004-x64
1CraxsRat_V...PS.dll
windows7-x64
1CraxsRat_V...PS.dll
windows10-2004-x64
1CraxsRat_V...ms.dll
windows7-x64
1CraxsRat_V...ms.dll
windows10-2004-x64
1CraxsRat_V...pf.dll
windows7-x64
1CraxsRat_V...pf.dll
windows10-2004-x64
1CraxsRat_V...ts.dll
windows7-x64
1CraxsRat_V...ts.dll
windows10-2004-x64
1CraxsRat_V...io.dll
windows7-x64
1CraxsRat_V...io.dll
windows10-2004-x64
1CraxsRat_V...on.dll
windows7-x64
1CraxsRat_V...on.dll
windows10-2004-x64
1CraxsRat_V...le.dll
windows7-x64
1CraxsRat_V...le.dll
windows10-2004-x64
1CraxsRat_V...et.dll
windows7-x64
1CraxsRat_V...et.dll
windows10-2004-x64
1CraxsRat_V...7z.dll
windows7-x64
3CraxsRat_V...7z.dll
windows10-2004-x64
3CraxsRat_V...7z.exe
windows7-x64
1CraxsRat_V...7z.exe
windows10-2004-x64
1Analysis
-
max time kernel
22s -
max time network
40s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 06:19
Behavioral task
behavioral1
Sample
CraxsRat_V6.7/ChangeLog.html
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
CraxsRat_V6.7/ChangeLog.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
CraxsRat_V6.7/CraxsRat_V6.7.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
CraxsRat_V6.7/CraxsRat_V6.7.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
CraxsRat_V6.7/DrakeUI.Framework.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
CraxsRat_V6.7/DrakeUI.Framework.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
CraxsRat_V6.7/GeoIPCitys.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
CraxsRat_V6.7/GeoIPCitys.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
CraxsRat_V6.7/HVMRun64.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
CraxsRat_V6.7/HVMRun64.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
CraxsRat_V6.7/HVMRuntm.dll
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
CraxsRat_V6.7/HVMRuntm.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
CraxsRat_V6.7/LiveCharts.MAPS.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
CraxsRat_V6.7/LiveCharts.MAPS.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
CraxsRat_V6.7/LiveCharts.WinForms.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
CraxsRat_V6.7/LiveCharts.WinForms.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
CraxsRat_V6.7/LiveCharts.Wpf.dll
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
CraxsRat_V6.7/LiveCharts.Wpf.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
CraxsRat_V6.7/LiveCharts.dll
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
CraxsRat_V6.7/LiveCharts.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
CraxsRat_V6.7/NAudio.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
CraxsRat_V6.7/NAudio.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
CraxsRat_V6.7/Newtonsoft.Json.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
CraxsRat_V6.7/Newtonsoft.Json.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
CraxsRat_V6.7/System.IO.Compression.ZipFile.dll
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
CraxsRat_V6.7/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
CraxsRat_V6.7/WinMM.Net.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
CraxsRat_V6.7/WinMM.Net.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
CraxsRat_V6.7/res/Lib/7z.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
CraxsRat_V6.7/res/Lib/7z.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
CraxsRat_V6.7/res/Lib/7z.exe
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
CraxsRat_V6.7/res/Lib/7z.exe
Resource
win10v2004-20230915-en
General
-
Target
CraxsRat_V6.7/HVMRuntm.dll
-
Size
2.2MB
-
MD5
559f1a94d4fadbe42745200c5deeb94c
-
SHA1
606e336a95c22d0a5bd260af68a3321a284a7270
-
SHA256
52cf690f3436c9e98a2ab13e2871ca95da72c34ea5dd36d5c52ecccfa78b5696
-
SHA512
49b85d97f32322cac68c811c7f0268b6d0a71f2dc4428281d724aab0355544da4b33aebffe72e5b92d0b024e40c29392bade4eec2f00c98a46a44eb3e1e547fa
-
SSDEEP
49152:eX8t9RJHZ9rXOjClE3xNP8AHn9yHyS4LdR1eFcDmoFwHqM9iJ4YI:eMttZVOG237PwSS4BfZDmCwKMs1
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28 PID 2068 wrote to memory of 2656 2068 rundll32.exe 28