Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
25-09-2023 08:28
General
-
Target
VanillaRat/Main/VanillaStub.exe
-
Size
111KB
-
MD5
ba4ef2f128dd9d5ad47cf36448248cbc
-
SHA1
c791033df85c85b1c67638a64177553cef896970
-
SHA256
3515285bcb1e7b4a7c5a570ab9ba0543f4733cc9b1a5afb6d4c1bc4d0b0afa92
-
SHA512
f83f79f85167e2980b85db8a8fbd731c352ccf049203749fb70fabba78067361ebd15fe22783cd8a80355e4ae66a6999eee200aadacf75556dec3c67b840f287
-
SSDEEP
3072:o0w4Vztdrx+jiEPtXKb0H/vbabULtyTl:LxrrkzPtabK/v50
Score
10/10
Malware Config
Signatures
-
VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
-
Vanilla Rat payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VanillaRat\Main\VanillaStub.exe"C:\Users\Admin\AppData\Local\Temp\VanillaRat\Main\VanillaStub.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3088-0-0x0000016668A40000-0x0000016668A62000-memory.dmpFilesize
136KB
-
memory/3088-1-0x00007FFD11170000-0x00007FFD11C31000-memory.dmpFilesize
10.8MB
-
memory/3088-2-0x000001666A870000-0x000001666A880000-memory.dmpFilesize
64KB
-
memory/3088-3-0x00007FFD11170000-0x00007FFD11C31000-memory.dmpFilesize
10.8MB
-
memory/3088-4-0x000001666A870000-0x000001666A880000-memory.dmpFilesize
64KB