Overview

overview

10

Static

static

10

basic.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    basic.exe

  • Size

    115KB

  • Sample

    230722-l8gykaba4y

  • MD5

    40a686daef5032b86eadeb9e017e01c4

  • SHA1

    3a91374cab9977190baa9b94ea4d433f47257ba4

  • SHA256

    af257f0e835be7e2d87d1e58a8f4ee22abad6684dbac081795f57276712696f3

  • SHA512

    12b12c85fbee63bcc3c65bc11d5e7949eb12c0060f7b1545a2fe6b130471a9adf355d043de81ccd80c6039e2e0341895a3037171c6f3633376f789fbbb6718d6

  • SSDEEP

    3072:SJZKnPE2YyJzELtyTFyYeY8lNgoiJ+sX8HFvytboN:SJZKBI0FyYeY4eoiJ+sCFvP

Score
10/10
vanillaratrat

Malware Config

Targets

    • Target

      basic.exe

    • Size

      115KB

    • MD5

      40a686daef5032b86eadeb9e017e01c4

    • SHA1

      3a91374cab9977190baa9b94ea4d433f47257ba4

    • SHA256

      af257f0e835be7e2d87d1e58a8f4ee22abad6684dbac081795f57276712696f3

    • SHA512

      12b12c85fbee63bcc3c65bc11d5e7949eb12c0060f7b1545a2fe6b130471a9adf355d043de81ccd80c6039e2e0341895a3037171c6f3633376f789fbbb6718d6

    • SSDEEP

      3072:SJZKnPE2YyJzELtyTFyYeY8lNgoiJ+sX8HFvytboN:SJZKBI0FyYeY4eoiJ+sCFvP

    Score
    10/10
    vanillaratrat

    • VanillaRat

      VanillaRat is an advanced remote administration tool coded in C#.

      ratvanillarat

    • Vanilla Rat payload

      rat

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks