Analysis
- max time kernel
150s - max time network
165s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
06/03/2024, 11:58
General
- Target CraxsRat_V6.7/CraxsRat.exe
- Size 69.7MB
- Sample240306-n5dsvabd59
- SHA256 911578c4d665c12299d237228b7eb5dfe32cf57d1a7b1c155a0fe95d8b31dbb5
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat.exe"C:\Users\Admin\AppData\Local\Temp\CraxsRat_V6.7\CraxsRat.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2488-0-0x00007FFEF1880000-0x00007FFEF2341000-memory.dmp
memory/2488-1-0x000001A04C270000-0x000001A05082E000-memory.dmp
memory/2488-2-0x00007FFEF24A0000-0x00007FFEF25EE000-memory.dmp
memory/2488-3-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-4-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-5-0x000001A052410000-0x000001A052432000-memory.dmp
memory/2488-6-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-7-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-8-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-9-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-10-0x000001A06AE50000-0x000001A06AE5C000-memory.dmp
memory/2488-11-0x000001A06AE80000-0x000001A06AE9C000-memory.dmp
memory/2488-13-0x000001A06C970000-0x000001A06C9AC000-memory.dmp
memory/2488-12-0x000001A06B000000-0x000001A06B02C000-memory.dmp
memory/2488-14-0x000001A06D990000-0x000001A06DB36000-memory.dmp
memory/2488-15-0x00007FFEF1880000-0x00007FFEF2341000-memory.dmp
memory/2488-16-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-17-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-18-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-19-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-20-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp
memory/2488-21-0x000001A06AEA0000-0x000001A06AEB0000-memory.dmp