Analysis
- max time kernel
168s - max time network
172s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
25/05/2022, 01:49
General
- Target ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c.exe
- Size 118KB
- Sample220525-b84r8aaghq
- SHA256 ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c
Score
10/10
Malware Config
Signatures
- VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
- Vanilla Rat Payload 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c.exe"C:\Users\Admin\AppData\Local\Temp\ba380964a0905d9c84431100df8ed63f4f11c5e36a859d9c89e98fa5c75c2c5c.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/932-130-0x0000000000E00000-0x0000000000E24000-memory.dmp
memory/932-131-0x0000000005E10000-0x00000000063B4000-memory.dmp
memory/932-132-0x0000000005860000-0x00000000058F2000-memory.dmp
memory/932-133-0x00000000057F0000-0x00000000057FA000-memory.dmp