Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
20-07-2023 12:33
General
-
Target
a961abf44439a3468017388012b05bd26783d4d95ab861b3a4edef6db622e466.exe
-
Size
115KB
-
MD5
b76d1f217230723ebce9e7da6c141900
-
SHA1
988302be6face5989f5ddf9ea89594d38ba5a9d5
-
SHA256
a961abf44439a3468017388012b05bd26783d4d95ab861b3a4edef6db622e466
-
SHA512
1ba509c37615c2038f455a08bab976c88ff2670793e8bab1602c156f3a6ad7c83fe1ea6e24a02a6f7854c33f8bfc0dbd6ff7da62214a4ecee4ccdb0d83e27927
-
SSDEEP
3072:tJZKnPE2YyJzELtyTFyYeY8lNgoiJ+sX8HFvytbmNI:tJZKBI0FyYeY4eoiJ+sCFv1
Score
10/10
Malware Config
Signatures
-
VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
-
Vanilla Rat payload 3 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a961abf44439a3468017388012b05bd26783d4d95ab861b3a4edef6db622e466.exe"C:\Users\Admin\AppData\Local\Temp\a961abf44439a3468017388012b05bd26783d4d95ab861b3a4edef6db622e466.exe"1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1132-53-0x0000000000370000-0x0000000000392000-memory.dmpFilesize
136KB
-
memory/1132-54-0x0000000073D90000-0x000000007447E000-memory.dmpFilesize
6.9MB
-
memory/1132-55-0x0000000004DE0000-0x0000000004E20000-memory.dmpFilesize
256KB
-
memory/1132-56-0x0000000073D90000-0x000000007447E000-memory.dmpFilesize
6.9MB
-
memory/1132-57-0x0000000004DE0000-0x0000000004E20000-memory.dmpFilesize
256KB