472223f8ad360c308f63e777769e67133d09ba9e14e971810f1e2f317082a955

Sharing

Copy URL Twitter E-mail

General

Target
CraxsRat v8.0 VIP.zip
Size 174.2MB
Sample260712-q94aeaa18p
SHA256 472223f8ad360c308f63e777769e67133d09ba9e14e971810f1e2f317082a955
MD5 f9c84b5c1995c338bf79df4489e3d9cd
SHA1 fa060685c22d98d4dea45c65e1f314cf20fcafa2
SHA512 d7bbcc58f41a501a2402c976cb6fc5bf25aa1c34ee00e3363dfda48f92b8e1ff28c44db149660ddb83ab383d7fdc7074139b8ef27321082ea1f3283e542eda50
SSDEEP 3145728:W0vz1veyE7EmHanN4fplsiqYmCy3dW5kN4NQ908t24UCy3dUbU3Io8SkfM:WM1veV6OfplsivmCM0kRmbCMf8SkfM
TLSH
T1BC9833E4E97680EBDD94707C11B03A05F256B2E0517CBB39A6E825E52D8EFE84E3C507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CraxsRat v8.0/DrakeUI.Framework.dll
- Size 1.6MB
- SHA256 70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
- MD5 0562b4c97f643306df491a938ae636da
- SHA1 0807c37b711374ed4814a9518c9e264517de89a0
- SHA512 c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf
- SSDEEP 24576:nYyUyUxws47SDJ+wfa3ZsacYwzhmT5LOMobxqFFnM9Pv1w+Fus:nYyUyUueD001YwzhmVSMoNqFF
- TLSH
  T1D085AE4527A88E1EE57E87FED4321420D7B49601B1DEE74FEEC1B4E92CA77888C09587
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CraxsRat v8.0/GeoIPCitys.dll
- Size 191KB
- SHA256 d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
- MD5 c070f2421851420e832e4f5989a775a2
- SHA1 d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46
- SHA512 75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e
- SSDEEP 3072:87IcHKc0TwY4O6BlLiJxTmd9h1+fJ5uJnjpUoh/ht21hYvpMaoySJHPc8E:8dHV0Tn4pox6d9G4k
- TLSH
  T153145F45B3EA644BFAFFEA35BD6460545BF6BCAE6925C4AC0E451D4C48F0B408DA0F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CraxsRat v8.0/LiveCharts.MAPS.dll
- Size 53KB
- SHA256 5b8a9a04f454a2c4da5989fa454a0138d3e5c40712816600f90111b7bf045c40
- MD5 dfee15e4c6efa37e6645d8b47c8581e0
- SHA1 876140e0855fcd15bfb590431fb7b280d1db4a21
- SHA512 4d0e7b0a5642b649c04e54d89e707ec00e79a0fa282eac19b6097b819652045c3e157763b5b2922a4c2252b0877059ef90eb60038280dbfbef9502f421d739df
- SSDEEP 768:r4gOx89xKERw2U11HI+bZO603JLw8MOrNNLSW5/5xTcb2y1ehVHp:rPKB22HIwwFNuC5N6n+VHp
- TLSH
  T14B33E44837986A69E7AD3A7454D3133053B8A6B22313F7168ED187F198773D20E94E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CraxsRat v8.0/LiveCharts.WinForms.dll
- Size 19KB
- SHA256 a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad
- MD5 76c775d09b24798f6923452e920979b5
- SHA1 3fe2c79512a0d1153fb07f6640b27106c90d333e
- SHA512 eacc093f8ac9401f617df7e07fd68a8a0f1f03aa150283de67ad8c338fcb1520b0f07335547cf533a646ff95f239c92b029f952a706e736bcd9508817c9be0f9
- SSDEEP 384:F5gNA4m0NkdPbJfGZLifwdNqF8vLvTjzHEhZFUPOxFBVGquJpQ76RqMm:F5gNnrNklJfGZLiAw27jrEhZFyYMm
- TLSH
  T197925126DB64C13CC7AF0EB8F8931A210570CB067693DB4E1D14F4DA8C63756BAA7297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CraxsRat v8.0/LiveCharts.Wpf.dll
- Size 212KB
- SHA256 1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
- MD5 e924f79f0b5f3e79c98477d75831813d
- SHA1 64f71e20e1953b13c771d8a8e63549ad6d64216e
- SHA512 063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1
- SSDEEP 6144:d/vd0eaDQcUc0GkiTV3bkACA3AloBtefVt+aA2xgKPo1zlW1w:vaErjGkiTV3bkACA3AloBtefVt+aAGBF
- TLSH
  T1992408B82368CDA9CBAF0675D011251043F19E676EE1CADAEDC090FE5F4BB4386425B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CraxsRat v8.0/LiveCharts.dll
- Size 148KB
- SHA256 9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
- MD5 9642899636959b7fc89bf34a8b998a90
- SHA1 479a0254d1c9e5565c7d861bb77f54b7eae50c96
- SHA512 435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2
- SSDEEP 3072:saegvMNVoz3Vlw6/R3z3MV1IdJJGVKWHC2KdxFFT9lzo:VFJlwYMVWY65z
- TLSH
  T1FCE33A1D7358C776CCDE6E3EE020482147F3E14AF6C2DB9A9F817CEB2913B898645562
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  CraxsRat v8.0/LiveChartsCountries.dll
- Size 59KB
- SHA256 f6e951697226a85e8ad11578a20a0de8c1923afbc69dfce3f0e10ea823d54c1a
- MD5 740659d4411bcf877f27217a2710b874
- SHA1 9df5c0d033e49026995e846fe27e1ab4955d43b1
- SHA512 96d810233dc40915d06c9adf6f49a62be8321a0ea6ace3c139922272dcf543e48b041b341694c126727e37e7a4ca1bd4ba7395ca18d998f629e87aa409c36b37
- SSDEEP 1536:E3VBdmmdVR/GF3VZC/owI8bbS56VX1xPzSoE3xy:EFDht/GF3VZC/xdu6VlxPzhIxy
- TLSH
  T1F4533FCE7A8A6567CD8F2BFB474E26064B79CD431A40C5563FD483C96B4E40CACD1A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  CraxsRat v8.0/LiveChartsRegion.dll
- Size 59KB
- SHA256 e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc
- MD5 0d4672955cddebc60cdc5cb0510294d8
- SHA1 8cad08e2fb925656bf7f70f954874f661d2fe32e
- SHA512 45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7
- SSDEEP 1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O
- TLSH
  T143531FCD668A6467CD8F3BFB470E26078B76CE432640C1563FD483C96B4A40D9CD1A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  CraxsRat v8.0/MetroSet UI.dll
- Size 444KB
- SHA256 6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
- MD5 d99a97de55b2561e57135433b44bb786
- SHA1 ab588b8d36683b52adcb32c03a9859b884838f29
- SHA512 7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
- SSDEEP 6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
- TLSH
  T1B7A46B06A3EA571EF1AF4779C4BD01B143B1FC037A3AC35A2CD9B59E59B17448A82393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  CraxsRat v8.0/Microsoft.Win32.Registry.dll
- Size 22KB
- SHA256 619737e2af8fb713085726631dd2e522fe130cac1d388a59c38907a47d7aadea
- MD5 da40f3db8b34571684c0cb5bcecd2a79
- SHA1 1c27a41fd84d6bfe99dabae2e59fcf12fccf6213
- SHA512 e656d72e111eaca7c8e9b7d4106030c1104286395046c2de58a04edd590cb2714dcf3aeca2b93f843b4663f1d1e630cc19f1e4eae2fa62f0d382fa18cc8a5981
- SSDEEP 384:z8a6WQCgE7MHVia7Z7aLPQmlJLfbTWnWDxW8QHRN74fZalxA2:AJCp70ViyrmlDt84a
- TLSH
  T18FA22A02EFE8402FFFF70E3519B5D9225D76FAC62902864E1958D2CE5DB2BC4D630629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  CraxsRat v8.0/NAudio.Core.dll
- Size 183KB
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH
  T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  CraxsRat v8.0/NAudio.WinMM.dll
- Size 56KB
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH
  T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  CraxsRat v8.0/NAudio.dll
- Size 498KB
- SHA256 3ad5d09b4c8c3146d15955a564a9f1a57d7c795b189a25c6f722a738d95ef89c
- MD5 6ca17abccae3050f391401b2955f9333
- SHA1 0975b039a793accb58130d6639262cd291d80d5d
- SHA512 c08f366aae9baf0e7762f47a2f79d0dee5187a1d7631e5838590b7c12911bdeb6247e0ff860ade36e04f1d6717f919ad98df6d3a1a556bff4b8994db9616ccec
- SSDEEP 12288:MnXnae2TPlr3zvzar5oRDaw92wP6mai9gs6C:K8lrT+r5ADakP4i9gs
- TLSH
  T1B7B45C5637E4552BD4AF2374E4F0090A47B2F48B36A7EF8B5594A7AD2D837824D00BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CraxsRat v8.0/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  CraxsRat v8.0/Siticone.Desktop.UI.dll
- Size 4.0MB
- SHA256 21eecaf504b7fe787a45f4aa8f8f36dacfc3ab1d75624dfb41827cdef2a9a589
- MD5 1582aa45d981e0e569c6e05698642b30
- SHA1 763506f312a186c55a04ef6a16ad7e867c394097
- SHA512 278a7a4e2b9d82528200b9f92244db3f228187d15c36fd169deb927e343bc4d0bb29c9dba496f86558aea4f4deb44d1e47a41d5598c0b375d99ad9fbe99cec34
- SSDEEP 24576:UCCxPAT4L7h3M7O2MLBSlvTh/aOBteUePU/DU/GHQYazK/DkWoql3zjbndHQ/jzb:WuO2MIThZNwewYDoyG
- TLSH
  T12E166D013BD08917D16EBF76B463141C97F6F804E6A7E74E7995F2AC2B9B3684802363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  CraxsRat v8.0/System.Data.SQLite.EF6.dll
- Size 196KB
- SHA256 857a287f7f39097c2f70ff0ce681d35196daee60b43f255bc72b842a351208c4
- MD5 6f69454f7206eb6fb00b1f15d13718d9
- SHA1 c1472ad5c91da5e729bf419b8546657b2152915c
- SHA512 27c193cb2d25938bc508312c38932a25d63a8ecf49c9af6ad2819d1291f44f2b4435725dfef2dded2e0f3415aa73c8af276084899302f8b196a993dde85ae095
- SSDEEP 3072:9Nh7rnOCmxzBE91M+I1X+IZ/6KP8czmLhL:9b7Zmx1E91AuQ6KP8c
- TLSH
  T1A2149725B3F09D31C1AA023029B57418ADF082F3737C5198FE9E63AD9F6A91117B7B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32