68ea23c1515b2306e607ce7b124f9314b4af9ee2572e23550b3ac1a8dd3b43e6

Submit
Reports

Overview

overview

Static

static

KraxxStealer-main.zip

windows7-x64

KraxxStealer-main.zip

windows10-2004-x64

KraxxSteal...OS.zip

windows7-x64

KraxxSteal...OS.zip

windows10-2004-x64

Kraxx-Buil...er.exe

windows7-x64

Kraxx-Buil...er.exe

windows10-2004-x64

Kraxx-Buil...nt.xml

windows7-x64

Kraxx-Buil...nt.xml

windows10-2004-x64

Kraxx-Buil...ed.xml

windows7-x64

Kraxx-Buil...ed.xml

windows10-2004-x64

Kraxx-Buil...ce.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...ce.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...VM.exe

windows7-x64

Kraxx-Buil...VM.exe

windows10-2004-x64

Kraxx-Buil...Notice

windows7-x64

Kraxx-Buil...Notice

windows10-2004-x64

Kraxx-Buil...SP.dll

windows10-2004-x64

KraxxSteal...DME.md

windows7-x64

KraxxSteal...DME.md

windows10-2004-x64

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-11-2024 10:02

Sharing

Copy URL

Twitter E-mail

Static task

static1

umbral

3 signatures

Behavioral task

behavioral1

Sample

KraxxStealer-main.zip

Resource

win7-20240708-en

umbral execution spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

KraxxStealer-main.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

KraxxStealer-main/Kraxx-OS.zip

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

KraxxStealer-main/Kraxx-OS.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe

Resource

win7-20240903-en

umbral execution spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe

Resource

win10v2004-20241007-en

umbral execution spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral7

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/TableTextService.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/en-US/TableTextService.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/WATPCSP.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

KraxxStealer-main/README.md

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral25

Sample

KraxxStealer-main/README.md

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll
Size

75KB
MD5

7c9382fe4ffd92d9bfd4b81052a30cb7
SHA1

c0cad6d611da214738e27ca9c88a039f08dd92f7
SHA256

aaf98f0aeab780be9639091ec65525c92f78d070f4e163aaf48ef5da49e65304
SHA512

c7c8245fec941d7586ea530f9418fad6a709b3f96af1426e91e52d7a6c6689bc5c63e40a1e97002e20a087824c92d237ea11ab9f03a84bb0f0f228c319792a64
SSDEEP

384:cAueYsrVuGdAoEtt7wLSZkqR3MV1JFRF1dk5W/7W+rzBpAv8TXAuOuOxJhSlq44l:ywWpOQ+3RDAuOuOxJhfILx1P50

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Kraxx-Builder\Kraxx-OS-Builder\Settings\bootmgr.efi.dll,#1
1⤵
PID:3000

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads