Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-07-2024 14:35

General

  • Target

    x64DBG.exe

  • Size

    114KB

  • MD5

    3789a9c16a98cf9de876ee9d7a2e20e8

  • SHA1

    d1d1e11b7e39efb6caf25a4f5ec74e5943909efd

  • SHA256

    ab331be0645a04eb3f3483bf11ea2b57208779101e9f77e3537970fb62ca7491

  • SHA512

    1ba601a52ed1f50558691592dd3c09cb52f9664f9e8add3b5665f42bcb63e14a5b89979888e2d94abf783677d6e88066bb91cea39cce970edc22a943276a6c65

  • SSDEEP

    3072:fgZApdYrD28fbJB2yLtyTEbjjxK3QdjrxivW+DXnH4vymbv1k:f/pe1J0EbXtrxivW+D34vb

Score
10/10

Malware Config

Signatures

  • VanillaRat

    VanillaRat is an advanced remote administration tool coded in C#.

  • Vanilla Rat payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\x64DBG.exe
    "C:\Users\Admin\AppData\Local\Temp\x64DBG.exe"
    1⤵
      PID:1696

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1696-0-0x0000000074B7E000-0x0000000074B7F000-memory.dmp

      Filesize

      4KB

    • memory/1696-1-0x0000000000730000-0x0000000000752000-memory.dmp

      Filesize

      136KB

    • memory/1696-2-0x0000000005570000-0x0000000005B14000-memory.dmp

      Filesize

      5.6MB

    • memory/1696-3-0x0000000005060000-0x00000000050F2000-memory.dmp

      Filesize

      584KB

    • memory/1696-4-0x0000000005040000-0x000000000504A000-memory.dmp

      Filesize

      40KB

    • memory/1696-5-0x0000000074B70000-0x0000000075320000-memory.dmp

      Filesize

      7.7MB

    • memory/1696-6-0x0000000074B7E000-0x0000000074B7F000-memory.dmp

      Filesize

      4KB

    • memory/1696-7-0x0000000074B70000-0x0000000075320000-memory.dmp

      Filesize

      7.7MB