Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
07-08-2024 14:44
General
-
Target
VanillaStub.exe
-
Size
114KB
-
MD5
185526401b0a3a083c797cac3598051a
-
SHA1
a3a4c4fd2b7f07843e0ac8eeb62b2c8871421b4f
-
SHA256
caba6c8f198ca5ec08ece1687210e756b860c90ecc32b49ef38a1a7d14524abe
-
SHA512
ea4f5e217be971950a05bd096dd526f40958ed2b92cbc62a21a83d258b665f35b13b32809b9cf4751887c743e1f58aaebecfab5c3b6ac1ed8e5bd968187adf3f
-
SSDEEP
3072:xgFtDHh9m0xajuYXPiKo3s+DXgHKv8mbIXC0LtyTy:aFRh9mEaKHS+DeKvYSE0
Score
10/10
Malware Config
Signatures
-
VanillaRat
VanillaRat is an advanced remote administration tool coded in C#.
-
Vanilla Rat payload 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\VanillaStub.exe"C:\Users\Admin\AppData\Local\Temp\VanillaStub.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2124-0-0x0000000073F4E000-0x0000000073F4F000-memory.dmpFilesize
4KB
-
memory/2124-1-0x0000000001240000-0x0000000001262000-memory.dmpFilesize
136KB
-
memory/2124-2-0x0000000073F40000-0x000000007462E000-memory.dmpFilesize
6.9MB
-
memory/2124-3-0x0000000073F40000-0x000000007462E000-memory.dmpFilesize
6.9MB