Overview

overview

10

Static

static

3e2edb8f93...49.exe

windows7_x64

10

3e2edb8f93...49.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e2edb8f934920d1f71052fc4a13ca3a159ce56ddaa14e60822c236675cd3b49

  • Size

    216KB

  • Sample

    220502-w6eqjadah9

  • MD5

    7d5130b3d2921ce20b1ff6015c63ac7b

  • SHA1

    6533edb2384541c31cdd08734e39b22e8815c861

  • SHA256

    3e2edb8f934920d1f71052fc4a13ca3a159ce56ddaa14e60822c236675cd3b49

  • SHA512

    7ac7ee838584b5cf0857e855c1ef821e46c4246ba41a366285c4cd46d30f60bf742ad9eec72a38e7b9fed50e69abb406fc0ba83ac324c8a98df0e4ac2010430f

Score
10/10
vanillaratrat

Malware Config

Targets

    • Target

      3e2edb8f934920d1f71052fc4a13ca3a159ce56ddaa14e60822c236675cd3b49

    • Size

      216KB

    • MD5

      7d5130b3d2921ce20b1ff6015c63ac7b

    • SHA1

      6533edb2384541c31cdd08734e39b22e8815c861

    • SHA256

      3e2edb8f934920d1f71052fc4a13ca3a159ce56ddaa14e60822c236675cd3b49

    • SHA512

      7ac7ee838584b5cf0857e855c1ef821e46c4246ba41a366285c4cd46d30f60bf742ad9eec72a38e7b9fed50e69abb406fc0ba83ac324c8a98df0e4ac2010430f

    Score
    10/10
    vanillaratrat

    • VanillaRat

      VanillaRat is an advanced remote administration tool coded in C#.

      ratvanillarat

    • Vanilla Rat Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks