Analysis

  • max time kernel
    153s
  • max time network
    306s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 06:13

General

  • Target

    CraxsRat_V6.7/CraxsRat_V6.7.exe

  • Size

    69.7MB

  • MD5

    cca4d2739be58d066353cee28ac8c9bf

  • SHA1

    b0e4b941c6f581d4360d6042d07f71246f417da3

  • SHA256

    911578c4d665c12299d237228b7eb5dfe32cf57d1a7b1c155a0fe95d8b31dbb5

  • SHA512

    446937d9c915332fae23a74ebb9925110bee3dafd576bc3d8ac86ef101df177cf11a6a2c989a8080fa2f0ac540c1560b553da41c52f0e1b8e32732ce95ff7894

  • SSDEEP

    1572864:N7J797mMevj0JNmA1fAMzttZmKl+tpIaeTKAC:xegmCfAM5HmKInIaEQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat_V6.7.exe
    "C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat_V6.7.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3024-0-0x0000017D27260000-0x0000017D2B81E000-memory.dmp

    Filesize

    69.7MB

  • memory/3024-1-0x00007FFC57190000-0x00007FFC572DE000-memory.dmp

    Filesize

    1.3MB

  • memory/3024-2-0x00007FFC55870000-0x00007FFC56331000-memory.dmp

    Filesize

    10.8MB

  • memory/3024-3-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-4-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-5-0x0000017D2BC30000-0x0000017D2BC52000-memory.dmp

    Filesize

    136KB

  • memory/3024-6-0x00007FFC55870000-0x00007FFC56331000-memory.dmp

    Filesize

    10.8MB

  • memory/3024-7-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-8-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-9-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-10-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-11-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-12-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-13-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-14-0x0000017D45DB0000-0x0000017D45DBC000-memory.dmp

    Filesize

    48KB

  • memory/3024-15-0x0000017D478B0000-0x0000017D478CC000-memory.dmp

    Filesize

    112KB

  • memory/3024-16-0x0000017D478D0000-0x0000017D478FC000-memory.dmp

    Filesize

    176KB

  • memory/3024-17-0x0000017D47940000-0x0000017D4797C000-memory.dmp

    Filesize

    240KB

  • memory/3024-18-0x0000017D48490000-0x0000017D48636000-memory.dmp

    Filesize

    1.6MB

  • memory/3024-19-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB

  • memory/3024-20-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-21-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB

  • memory/3024-22-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-23-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB

  • memory/3024-24-0x0000017D45FB0000-0x0000017D45FC0000-memory.dmp

    Filesize

    64KB

  • memory/3024-25-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB

  • memory/3024-26-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB

  • memory/3024-27-0x0000017D4C190000-0x0000017D4C290000-memory.dmp

    Filesize

    1024KB