Analysis

  • max time kernel
    440s
  • max time network
    1169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-04-2024 03:34

General

  • Target

    S500 RAT/S500 RAT/Compilers/tinycc/libtcc.dll

  • Size

    221KB

  • MD5

    018d32ce36c442b94c89a112282106ba

  • SHA1

    d64c9b5ade44b0c766790581d31d2925f80c8fe8

  • SHA256

    5673e555abaf7adc8856c04e2ecb63fee657aca2c1cf538f7bf4ddcfba8b78fd

  • SHA512

    cc77978a01379cbae0c45447bb8dcbc3bee99d6fce5eecbf0b5128ca965ecc71a1b86f6ec8eef79eeb4b79af1a2f9f436eecbac2ec5880f2c10e3a5cb2cbede7

  • SSDEEP

    3072:Uo/H0rj173sxwQYsZjqwVFg49F3UaEX6FJtdHUaXnuBRbsWJwPNAzvSEw6/wwRkI:F/H0v1oxw+9bnERbLJeE//wakI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\S500 RAT\S500 RAT\Compilers\tinycc\libtcc.dll",#1
    1⤵
      PID:4492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4492-0-0x00007FFCF4BF0000-0x00007FFCF4C55000-memory.dmp
      Filesize

      404KB