General

  • Target

    Silver Rat.zip

  • Size

    19.6MB

  • MD5

    f67750ed58c00406f728287640231c3c

  • SHA1

    e89408beaf5af22b470ad6c33fbeb63b57095ff3

  • SHA256

    954f637d4c8d2c47dc648d703f073fa8586222a8cef8aa8226bce48490ce8b10

  • SHA512

    9820e79cc0ecef5a250771ae7250aeb51e1370976c482c7d3847f517b0d109ac075b0bcea1cdb47736c923be10ded43af66c7996fe4999c25826980af2110b0b

  • SSDEEP

    393216:piz4ay92E7wdPIpsbGMoTnhqfglsXczA0nkgNdLHw:po3AsXbNoFIpc02kKQ

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 2 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Silver Rat.zip
    .zip
  • Silver Rat/Bunifu.Licensing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/Loader.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • Silver Rat/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/Plugins/Camera.dll
  • Silver Rat/Plugins/Chat.dll
  • Silver Rat/Plugins/HApps.dll
  • Silver Rat/Plugins/HBrowser.dll
  • Silver Rat/Plugins/HRDP.dll
  • Silver Rat/Plugins/HVNC.dll
  • Silver Rat/Plugins/Keylogger.dll
  • Silver Rat/Plugins/Manager.dll
  • Silver Rat/Plugins/Options.dll
  • Silver Rat/Plugins/OptionsForm.dll
  • Silver Rat/Plugins/OptionsForm.dll.config
  • Silver Rat/Plugins/Passwords.dll
  • Silver Rat/Plugins/RAPP.dll
  • Silver Rat/Plugins/RDP.dll
  • Silver Rat/Plugins/Ransom.dll
  • Silver Rat/Plugins/ReverseProxy.dll
  • Silver Rat/Plugins/ScanNET.dll
  • Silver Rat/Profiles/Builder.xml
  • Silver Rat/Profiles/SocketPort.xml
  • Silver Rat/RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/SilverRat.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Silver Rat/SilverRat.exe.config
    .xml
  • Silver Rat/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/System.Collections.Immutable.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/bouncycastle.crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/bunifu.ui.winforms.1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/bunifu.ui.winforms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/cgeoip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/guna.ui2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Silver Rat/protobuf-net.core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Silver Rat/stub.cs
    .js