Overview

overview

10

Static

static

10

cool.exe

windows7-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2023 07:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cool.exe

  • Size

    114KB

  • MD5

    0d688b01e87efbe5099e679a03e27ff4

  • SHA1

    7265538d25e37f5eed97e1de3c85a612b5a8808e

  • SHA256

    58ba8b27f1c71a2b4e6bc8fb41e11b839a79ae0f8681833eb7c750bea49a36d7

  • SHA512

    f408a29fabb98290578c5d036cb519ad4466b9c1ea76b513d5e5a4de32e3b22d8bf1f98f2a00cb652d4adb0a3a4db5b277b243d175be942aba7c75d663754b89

  • SSDEEP

    3072:EJZKnPE2YyJzELtyT9yYeY8lNgoiJ+sX8HFvytbWNz:EJZKBI09yYeY4eoiJ+sCFv1

Score
10/10
vanillaratrat

Malware Config

Signatures

  • VanillaRat

    VanillaRat is an advanced remote administration tool coded in C#.

    ratvanillarat
  • Vanilla Rat payload 1 IoCs
    rat

Processes

  • C:\Users\Admin\AppData\Local\Temp\cool.exe
    "C:\Users\Admin\AppData\Local\Temp\cool.exe"
    1⤵
      PID:2556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2556-54-0x0000000000B50000-0x0000000000B72000-memory.dmp
      Filesize

      136KB

      Download
    • memory/2556-55-0x00000000740F0000-0x00000000747DE000-memory.dmp
      Filesize

      6.9MB

      Download
    • memory/2556-56-0x0000000000AF0000-0x0000000000B30000-memory.dmp
      Filesize

      256KB

      Download
    • memory/2556-57-0x00000000740F0000-0x00000000747DE000-memory.dmp
      Filesize

      6.9MB

      Download