Overview
overview
10Static
static
10KraxxStealer-main.zip
windows7-x64
10KraxxStealer-main.zip
windows10-2004-x64
1KraxxSteal...OS.zip
windows7-x64
1KraxxSteal...OS.zip
windows10-2004-x64
1Kraxx-Buil...er.exe
windows7-x64
10Kraxx-Buil...er.exe
windows10-2004-x64
10Kraxx-Buil...nt.xml
windows7-x64
3Kraxx-Buil...nt.xml
windows10-2004-x64
1Kraxx-Buil...ed.xml
windows7-x64
3Kraxx-Buil...ed.xml
windows10-2004-x64
1Kraxx-Buil...ce.dll
windows10-2004-x64
3Kraxx-Buil...fi.dll
windows7-x64
1Kraxx-Buil...fi.dll
windows10-2004-x64
1Kraxx-Buil...fi.dll
windows7-x64
1Kraxx-Buil...fi.dll
windows10-2004-x64
1Kraxx-Buil...ce.dll
windows10-2004-x64
1Kraxx-Buil...fi.dll
windows7-x64
1Kraxx-Buil...fi.dll
windows10-2004-x64
1Kraxx-Buil...VM.exe
windows7-x64
1Kraxx-Buil...VM.exe
windows10-2004-x64
1Kraxx-Buil...Notice
windows7-x64
1Kraxx-Buil...Notice
windows10-2004-x64
1Kraxx-Buil...SP.dll
windows10-2004-x64
1KraxxSteal...DME.md
windows7-x64
3KraxxSteal...DME.md
windows10-2004-x64
3Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
15-11-2024 10:02
Behavioral task
behavioral1
Sample
KraxxStealer-main.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
KraxxStealer-main.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
KraxxStealer-main/Kraxx-OS.zip
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
KraxxStealer-main/Kraxx-OS.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/TableTextService.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/en-US/TableTextService.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Kraxx-Builder/Kraxx-OS-Builder/Source/WATPCSP.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
KraxxStealer-main/README.md
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
KraxxStealer-main/README.md
Resource
win10v2004-20241007-en
General
-
Target
Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml
-
Size
8KB
-
MD5
a87b873d20ae123d3ef356b2a971c9df
-
SHA1
670f14fd1082341c25ec7926a9794da9d6d43f4f
-
SHA256
0550606fb6604bb229f973dc60984754eff1ea3d6d86f64658918b121cfe13ef
-
SHA512
8755e2033fd218c2e29ae5d67c6bb1317effd7fa67407f2a9f050a1dafe5644df5ef92a6040a703a525213c9ff13c57dc49d77941db9bc5b22f3fc0644d67637
-
SSDEEP
48:3gD/NgfoENgf9+oCWyNg8tNg8PNg8UCNg5fiNg8fENg8iNg81QNg8oENg8FZNg8N:4SoCWjWlVvfpFhFPXztrFoflH
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Kraxx-Builder\Kraxx-OS-Builder\Settings\AssemblyList_4_extended.xml"1⤵PID:3016