Analysis
- max time kernel
120s - max time network
146s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
06/03/2024, 11:58
General
- Target CraxsRat_V6.7/CraxsRat.exe
- Size 69.7MB
- Sample240306-n5dsvabd59
- SHA256 911578c4d665c12299d237228b7eb5dfe32cf57d1a7b1c155a0fe95d8b31dbb5
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat.exe"C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2292-0-0x000007FEF5910000-0x000007FEF62FC000-memory.dmp
memory/2292-1-0x00000000008B0000-0x0000000004E6E000-memory.dmp
memory/2292-2-0x000007FEF4250000-0x000007FEF437C000-memory.dmp
memory/2292-3-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-4-0x00000000003F0000-0x0000000000412000-memory.dmp
memory/2292-5-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-6-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-7-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-8-0x0000000000530000-0x000000000053C000-memory.dmp
memory/2292-9-0x00000000007E0000-0x000000000080C000-memory.dmp
memory/2292-10-0x0000000000810000-0x000000000084C000-memory.dmp
memory/2292-11-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-12-0x0000000000850000-0x000000000085A000-memory.dmp
memory/2292-13-0x0000000000850000-0x000000000085A000-memory.dmp
memory/2292-14-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-15-0x0000000020FC0000-0x0000000021166000-memory.dmp
memory/2292-16-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-17-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-18-0x000007FEF5910000-0x000007FEF62FC000-memory.dmp
memory/2292-19-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-20-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-21-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-23-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-22-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-24-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-25-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-26-0x000000001F550000-0x000000001F5D0000-memory.dmp
memory/2292-27-0x0000000000850000-0x000000000085A000-memory.dmp
memory/2292-28-0x000000001F550000-0x000000001F5D0000-memory.dmp