vanillarat | 0fd18400128bde806c3cfffc3e2d1eec9d2a132ac2609d66b8587f90a2cf6605 | Triage

Analysis

max time kernel
156s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25-05-2022 01:06

Sharing

Report Analysis Logs

General

Target

0fd18400128bde806c3cfffc3e2d1eec9d2a132ac2609d66b8587f90a2cf6605.exe
Size

114KB
MD5

04cacfc3ff348860de9ba6a3b895e1e5
SHA1

f32555dc87e021ee2862f0161cefe999193e99c9
SHA256

0fd18400128bde806c3cfffc3e2d1eec9d2a132ac2609d66b8587f90a2cf6605
SHA512

bfd866e4b3591c9b7254ec32029d9a95e9d7c7f0a8c2ddbb9619f7324e49589624e9cb1e2fbed1da657ffdf00adc757f3bb29ba67b16c8786520fa0bfcabb536

Score

10^/10

vanillarat rat

Malware Config

Signatures

VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
rat vanillarat

Vanilla Rat Payload 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/4276-130-0x00000000004F0000-0x0000000000512000-memory.dmp	vanillarat

C:\Users\Admin\AppData\Local\Temp\0fd18400128bde806c3cfffc3e2d1eec9d2a132ac2609d66b8587f90a2cf6605.exe
"C:\Users\Admin\AppData\Local\Temp\0fd18400128bde806c3cfffc3e2d1eec9d2a132ac2609d66b8587f90a2cf6605.exe"
1⤵
PID:4276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4276-130-0x00000000004F0000-0x0000000000512000-memory.dmp

Filesize
136KB

Download
memory/4276-131-0x00000000054F0000-0x0000000005A94000-memory.dmp

Filesize
5.6MB

Download
memory/4276-132-0x0000000004F40000-0x0000000004FD2000-memory.dmp

Filesize
584KB

Download
memory/4276-133-0x0000000004ED0000-0x0000000004EDA000-memory.dmp

Filesize
40KB

Download