Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
02-01-2024 16:54
General
-
Target
3e82d4b205d458e65db00eb0f4231546.exe
-
Size
114KB
-
MD5
3e82d4b205d458e65db00eb0f4231546
-
SHA1
6047758f81a94f3738f0901f9d04cb4e25abbe34
-
SHA256
92d129825bda8b18723026a90fcc19bed5614c7ba17b1a50e1ed91518fc93752
-
SHA512
99804e70e2901414db122096f6ef72c5cc652fefbfe129d2b5e91dd11e33b94e878d090971f890e2b335200823f441464263f959e7574a47a9afcbda3a2102bf
-
SSDEEP
3072:tgZApdYrD28fbJB2yLtyT4bjjxK3QdjrxivW+DXnH4vymbc1g:t/pe1J04bXtrxivW+D34vC
Score
10/10
Malware Config
Signatures
-
VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
-
Vanilla Rat payload 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e82d4b205d458e65db00eb0f4231546.exe"C:\Users\Admin\AppData\Local\Temp\3e82d4b205d458e65db00eb0f4231546.exe"1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4960-1-0x0000000074AC0000-0x0000000075270000-memory.dmpFilesize
7.7MB
-
memory/4960-2-0x0000000005B20000-0x00000000060C4000-memory.dmpFilesize
5.6MB
-
memory/4960-3-0x0000000005570000-0x0000000005602000-memory.dmpFilesize
584KB
-
memory/4960-4-0x00000000057D0000-0x00000000057E0000-memory.dmpFilesize
64KB
-
memory/4960-5-0x0000000005500000-0x000000000550A000-memory.dmpFilesize
40KB
-
memory/4960-0-0x0000000000C10000-0x0000000000C32000-memory.dmpFilesize
136KB
-
memory/4960-6-0x0000000009410000-0x0000000009476000-memory.dmpFilesize
408KB
-
memory/4960-7-0x0000000074AC0000-0x0000000075270000-memory.dmpFilesize
7.7MB
-
memory/4960-8-0x00000000057D0000-0x00000000057E0000-memory.dmpFilesize
64KB