68ea23c1515b2306e607ce7b124f9314b4af9ee2572e23550b3ac1a8dd3b43e6

Submit
Reports

Overview

overview

Static

static

KraxxStealer-main.zip

windows7-x64

KraxxStealer-main.zip

windows10-2004-x64

KraxxSteal...OS.zip

windows7-x64

KraxxSteal...OS.zip

windows10-2004-x64

Kraxx-Buil...er.exe

windows7-x64

Kraxx-Buil...er.exe

windows10-2004-x64

Kraxx-Buil...nt.xml

windows7-x64

Kraxx-Buil...nt.xml

windows10-2004-x64

Kraxx-Buil...ed.xml

windows7-x64

Kraxx-Buil...ed.xml

windows10-2004-x64

Kraxx-Buil...ce.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...ce.dll

windows10-2004-x64

Kraxx-Buil...fi.dll

windows7-x64

Kraxx-Buil...fi.dll

windows10-2004-x64

Kraxx-Buil...VM.exe

windows7-x64

Kraxx-Buil...VM.exe

windows10-2004-x64

Kraxx-Buil...Notice

windows7-x64

Kraxx-Buil...Notice

windows10-2004-x64

Kraxx-Buil...SP.dll

windows10-2004-x64

KraxxSteal...DME.md

windows7-x64

KraxxSteal...DME.md

windows10-2004-x64

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 10:02

Sharing

Copy URL

Twitter E-mail

Static task

static1

umbral

3 signatures

Behavioral task

behavioral1

Sample

KraxxStealer-main.zip

Resource

win7-20240708-en

umbral execution spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

KraxxStealer-main.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

KraxxStealer-main/Kraxx-OS.zip

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

KraxxStealer-main/Kraxx-OS.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe

Resource

win7-20240903-en

umbral execution spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

Kraxx-Builder/Kraxx-OS-Builder/Kraxx-Builder.exe

Resource

win10v2004-20241007-en

umbral execution spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral7

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_client.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/AssemblyList_4_extended.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/TableTextService.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgfw.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/bootmgr.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/en-US/TableTextService.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Kraxx-Builder/Kraxx-OS-Builder/Settings/memtest.efi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/SenseTVM.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/ThirdPartyNotice

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Kraxx-Builder/Kraxx-OS-Builder/Source/WATPCSP.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

KraxxStealer-main/README.md

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral25

Sample

KraxxStealer-main/README.md

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Kraxx-Builder/Kraxx-OS-Builder/Source/WATPCSP.dll
Size

188KB
MD5

8dad4f7948cd97c61e144e70cf2e73f2
SHA1

1dbb6eb9553264b3112eb5ca5d8e29dd5018d531
SHA256

24f8950f914e4a1d7ce9c9c776bd5bcf96a44d55388f153eb3e8f86e199a99e0
SHA512

8f2dbf9a4cc2281141fd1fbcbeb5301a8310634770e8464a0834ec17165e5bc925b1d19128510a0beecf88df7cbd83ebc233ac397c3dcaf34841f2c57c631fa8
SSDEEP

3072:X3p+pTbwmZTFXM8wJLZJvjYjQAG6D+vlrPC7+B:nebwmZT1MFZ6D+vlrPC

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Kraxx-Builder\Kraxx-OS-Builder\Source\WATPCSP.dll,#1
1⤵
PID:4000

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads