Overview

overview

10

Static

static

e3025b92ca...81.exe

windows7_x64

5

e3025b92ca...81.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3025b92ca323fe6dc93a50edd16f8e0fa66a29f3a74b70266a6fbb0bef6cc81

  • Size

    371KB

  • Sample

    220502-sd6rrsfeg6

  • MD5

    2d7a149c2065bf05c3d3fc056a80cd2b

  • SHA1

    cec31a5b837314d47c911b96e44039b64f4831be

  • SHA256

    e3025b92ca323fe6dc93a50edd16f8e0fa66a29f3a74b70266a6fbb0bef6cc81

  • SHA512

    dff6515cdad12c2d65abcf20c707b058cb350caf419afd05f1e53e66c8d58b6cb8210ae59018d3667e0dbbad31816d8e170087735950f979841bf3376e778dae

Score
10/10
vanillaratrat

Malware Config

Targets

    • Target

      e3025b92ca323fe6dc93a50edd16f8e0fa66a29f3a74b70266a6fbb0bef6cc81

    • Size

      371KB

    • MD5

      2d7a149c2065bf05c3d3fc056a80cd2b

    • SHA1

      cec31a5b837314d47c911b96e44039b64f4831be

    • SHA256

      e3025b92ca323fe6dc93a50edd16f8e0fa66a29f3a74b70266a6fbb0bef6cc81

    • SHA512

      dff6515cdad12c2d65abcf20c707b058cb350caf419afd05f1e53e66c8d58b6cb8210ae59018d3667e0dbbad31816d8e170087735950f979841bf3376e778dae

    Score
    10/10
    vanillaratrat

    • VanillaRat

      VanillaRat is an advanced remote administration tool coded in C#.

      ratvanillarat

    • Vanilla Rat Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks