Overview

overview

10

Static

static

10

ba380964a0...5c.exe

windows7_x64

10

ba380964a0...5c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c

  • Size

    118KB

  • Sample

    220525-b84r8aaghq

  • MD5

    994b2e4e67a5c00676c603f7d5846a1d

  • SHA1

    7977e2480736dcb8b2612054839ef8ac29b2bc9d

  • SHA256

    ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c

  • SHA512

    7ace1c3b68d1fe0875e5fcbe5b378d1975a4ac4305ec62b8366af72e858251ab7dba0d28d18d818d2f7f349b28d4594a49903a6699c70a64662f1f4d6267f993

Score
10/10
vanillaratpersistencerat

Malware Config

Targets

    • Target

      ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c

    • Size

      118KB

    • MD5

      994b2e4e67a5c00676c603f7d5846a1d

    • SHA1

      7977e2480736dcb8b2612054839ef8ac29b2bc9d

    • SHA256

      ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c

    • SHA512

      7ace1c3b68d1fe0875e5fcbe5b378d1975a4ac4305ec62b8366af72e858251ab7dba0d28d18d818d2f7f349b28d4594a49903a6699c70a64662f1f4d6267f993

    Score
    10/10
    vanillaratpersistencerat

    • VanillaRat

      VanillaRat is an advanced remote administration tool coded in C#.

      ratvanillarat

    • Vanilla Rat Payload

      rat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks