Overview

overview

10

Static

static

58df18acac...15.exe

windows7_x64

10

58df18acac...15.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58df18acac2d0ff6349bfb7cff0d5d033454b2a944d1e7ec9da8ebb88b2c1415

  • Size

    211KB

  • Sample

    220502-sdxh4afef6

  • MD5

    e131bc56ad911665e9a7e7d570732307

  • SHA1

    c768f7657768c18503740791bdb71a25179a7db5

  • SHA256

    58df18acac2d0ff6349bfb7cff0d5d033454b2a944d1e7ec9da8ebb88b2c1415

  • SHA512

    4c4a518332dd9571e0f1c3b9304435f8028576b1fb6780e1aaa5484956afd4fe53cda1a855247fada79660c3cfd8f0469a4c936e95fac4e3d244cbb5112314b2

Score
10/10
vanillaratrat

Malware Config

Targets

    • Target

      58df18acac2d0ff6349bfb7cff0d5d033454b2a944d1e7ec9da8ebb88b2c1415

    • Size

      211KB

    • MD5

      e131bc56ad911665e9a7e7d570732307

    • SHA1

      c768f7657768c18503740791bdb71a25179a7db5

    • SHA256

      58df18acac2d0ff6349bfb7cff0d5d033454b2a944d1e7ec9da8ebb88b2c1415

    • SHA512

      4c4a518332dd9571e0f1c3b9304435f8028576b1fb6780e1aaa5484956afd4fe53cda1a855247fada79660c3cfd8f0469a4c936e95fac4e3d244cbb5112314b2

    Score
    10/10
    vanillaratrat

    • VanillaRat

      VanillaRat is an advanced remote administration tool coded in C#.

      ratvanillarat

    • Vanilla Rat Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks