Craxs Rat Download Portable

| Indicator | Example | |-----------|---------| | | SHA‑256: c7a1d9e5b3f2a8d2e9a4f2c7b5d7e8f6a1b3c9d5e6f7a9b0c1d2e3f4a5b6c7d8 (subject to change with new variants) | | Filename Patterns | svchost.exe , explorer.exe , taskmgr.exe placed in unusual directories (e.g., %AppData%\Microsoft\ ) | | Persistence Registry Keys | HKCU\Software\Microsoft\Windows\CurrentVersion\Run\random | | Network Traffic | Outbound HTTP/HTTPS to newly‑registered domains or IPs that resolve to fast‑flux networks; use of uncommon ports (e.g., 8080, 8443) for C2. |