Overview

overview

10

Static

static

10

VanillaRAT...der.js

windows7-x64

3

VanillaRAT...der.js

windows10-2004-x64

3

VanillaRAT...ent.js

windows7-x64

3

VanillaRAT...ent.js

windows10-2004-x64

3

VanillaRAT...mon.js

windows7-x64

3

VanillaRAT...mon.js

windows10-2004-x64

3

VanillaRAT...ons.js

windows7-x64

3

VanillaRAT...ons.js

windows10-2004-x64

3

VanillaRAT...ver.js

windows7-x64

3

VanillaRAT...ver.js

windows10-2004-x64

3

VanillaRAT...er.vbs

windows7-x64

1

VanillaRAT...er.vbs

windows10-2004-x64

1

VanillaRAT...orm.js

windows7-x64

3

VanillaRAT...orm.js

windows10-2004-x64

3

VanillaRAT...rm.vbs

windows7-x64

1

VanillaRAT...rm.vbs

windows10-2004-x64

1

VanillaRAT...at.vbs

windows7-x64

1

VanillaRAT...at.vbs

windows10-2004-x64

1

VanillaRAT...ps.vbs

windows7-x64

1

VanillaRAT...ps.vbs

windows10-2004-x64

1

VanillaRAT...er.vbs

windows7-x64

1

VanillaRAT...er.vbs

windows10-2004-x64

1

VanillaRAT...on.vbs

windows7-x64

1

VanillaRAT...on.vbs

windows10-2004-x64

1

VanillaRAT...er.vbs

windows7-x64

1

VanillaRAT...er.vbs

windows10-2004-x64

1

VanillaRAT...ain.js

windows7-x64

3

VanillaRAT...ain.js

windows10-2004-x64

3

VanillaRAT...in.vbs

windows7-x64

1

VanillaRAT...in.vbs

windows10-2004-x64

1

VanillaRAT...ox.vbs

windows7-x64

1

VanillaRAT...ox.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VanillaRAT-master.zip

  • Size

    16.2MB

  • Sample

    250120-qbjs4szqcx

  • MD5

    e5af33bcdd5d0f29501bbb443852c7a7

  • SHA1

    1e3ddd5b70f9e2c43b12b7f9d7d24ebad385255d

  • SHA256

    7128c6df6da94ece0b72e0781c497addbcac04e5af4b758325c21c3db28d45a0

  • SHA512

    8cd917a1f3d7e4dfcc1800d51d6c5e3dded945f2ee280abdec976c1ca91f7077d8177d9e15330ca3191c6e80c060aae1a31454f34770c387c63e677882bca709

  • SSDEEP

    393216:3TiK49992DWo4CsLQIv7kEPlb5H8jjC3xcY7tUQA8uTutK58U6t:3WJb92K7LtNlb5H83w57tFuStKCU6t

Score
10/10
vanillaratexecutionrat

Malware Config

Targets

    • Target

      VanillaRAT-master/VanillaRat/Classes/Builder.cs

    • Size

      2KB

    • MD5

      9bd16e45773d191b5979090cd53eaaab

    • SHA1

      a308cb70f77dec060b0027864389e9835e2d5829

    • SHA256

      45e12ae5054aa17b1f661098b4d5a424da2042eb409906301301b36d6422b93a

    • SHA512

      14810d06e540eb3650890cef8b56a1f42999126ccfb00c944a1fdbd6619fb6bc21fd2e9ad91b3f14968cc082a68825b922a4f85175494fb0e2065d7772ae2a30

    Score
    3/10
    execution
    behavioral1behavioral2

    • Target

      VanillaRAT-master/VanillaRat/Classes/Telepathy/Client.cs

    • Size

      2KB

    • MD5

      133c58e52cf1f6993fc242228a28599c

    • SHA1

      49ff198b73b106338db26cfd1c4a6dd57f6fdbe8

    • SHA256

      5a9aeef98d0e0cb3c25357d67f479f19a8c401579d0542cd81a0b86560f29be9

    • SHA512

      ae1948f4619ec6b5042ca81338aa3d4c676e71946db4bb4b9daf9730ebd196d8ad3d1d1d5e968d7c529703071c1d03302a0f4fb1609883d46c96e1d099be5d0c

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      VanillaRAT-master/VanillaRat/Classes/Telepathy/Common.cs

    • Size

      4KB

    • MD5

      f2be509bb81014858de01db0554bf237

    • SHA1

      1a10b1bfca594c5a532dfb7d10f5c37f07157ec9

    • SHA256

      18674e1b0f67cbd36cb96e0d473081066e7409c0cc1c91dfc0e3f23b190f9b0a

    • SHA512

      994a76cd6e9218c1b138f5077fa17dfcf23525a8361639610ff05b234aea0a81559df764970ac44cfde976f059380bb1e0e1a130ad207f4a67f9d5ff16a0ac26

    • SSDEEP

      96:Jj4acVS9byvws/B7Z12LbF/1miSCMkjW7mCiK1yb:inS9+vws/B7n2LbF/AiSCMkaiCiK1yb

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      VanillaRAT-master/VanillaRat/Classes/Telepathy/NetworkStreamExtensions.cs

    • Size

      913B

    • MD5

      e0f735493d251ffe92ec1fd2ea904ad8

    • SHA1

      58592d15644f66af31598c31c9591e4c6ffed9f5

    • SHA256

      a3cabcc948a7da106458093bb6488ffa00f553c97ed3ed7beefdb30e567649ec

    • SHA512

      c386a411fb00202fa8273cd444470b603735d713ad3111e3fec6d49dcefddc34ede4874c43fe85d2adaf619df86677d895270587a0e4b134d69318f571f799ec

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      VanillaRAT-master/VanillaRat/Classes/Telepathy/Server.cs

    • Size

      5KB

    • MD5

      fc84a285d397f46e1414d861651dd7df

    • SHA1

      3f7ddc4a1559d9750f042ec2a8c4bd2eee6c0c9a

    • SHA256

      d21c8ceaa678b21efc32b2f7445428c5ab78806618e2b3798f79f90695dad8e7

    • SHA512

      d2a769591d361b58e9c0b9117c0994fa180c1087daa0bd74defeba16efee142548d91642a29bd63a244e15f0eed19ac12e7e639a40c05ecd3b0da0538fb82265

    • SSDEEP

      96:Jj4a4Y8cVSo3yY4HMie8LltSyQeNChyFrCEzkwzyajfi6I+5/15uzb1nzzbeyb:itoSo3yqie8LltSyQeNChyFrCEzkwzyH

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      VanillaRAT-master/VanillaRat/Forms/AudioRecorder.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral11behavioral12

    • Target

      VanillaRAT-master/VanillaRat/Forms/BuilderForm.cs

    • Size

      2KB

    • MD5

      39e5c52a950c6394b6f44f4af47bfe91

    • SHA1

      1422ab15b2533f5d3535112f3ee305086503ca1b

    • SHA256

      43a0ddb0673f29049d4a235ac5440a2f902226e59951a1a29cd6a8bef6b9e109

    • SHA512

      3794a5592bf093931ab777003bf369987d91baf696d90914ccb40a4a65189e157579c318c3ea12b59abf4abaf2d804bea4edb86a00bd8c4e8d3e094e779dc49c

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      VanillaRAT-master/VanillaRat/Forms/BuilderForm.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral15behavioral16

    • Target

      VanillaRAT-master/VanillaRat/Forms/Chat.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral17behavioral18

    • Target

      VanillaRAT-master/VanillaRat/Forms/ClientRunningApps.resx

    • Size

      5KB

    • MD5

      ebb797ab05382d64c606a8cd3d56aa55

    • SHA1

      33182e59aeb6a1f61a2e98299727589c8f892715

    • SHA256

      e0000af62728b70fbd6948378fffb7584a94c9a31c23dfafd5b34c6bca07075c

    • SHA512

      c828d089cb3b7fc3bd9d68608ef94df11fa25bdfdf82667108e887e5617c27c9c74322cf4ced08a6115d93af8ad7aba4a5856a59b9d464e114d24b29a0c7253e

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUT:Zf+tLPfYnLvFVOiFQaUD7Ukbawo

    Score
    1/10
    behavioral19behavioral20

    • Target

      VanillaRAT-master/VanillaRat/Forms/ClipboardTextViewer.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral21behavioral22

    • Target

      VanillaRAT-master/VanillaRat/Forms/ComputerInformation.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral23behavioral24

    • Target

      VanillaRAT-master/VanillaRat/Forms/Keylogger.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral25behavioral26

    • Target

      VanillaRAT-master/VanillaRat/Forms/Main.cs

    • Size

      48KB

    • MD5

      c951c13d374aa3a04f5998591f451c51

    • SHA1

      3bd2b08a6ca0fabf33871b8ed9a33181a683b93c

    • SHA256

      f3501d9e5800b07dc1e188480eae1be92c99759674a8933ce63a32554b91dabf

    • SHA512

      74360232ff42a8577b94371f82c8236f46abf505df2ff9a41bb8338a654d0fc75c34a1539a04478588ca3af4b0b5db1f0432142aae54f6640cfce8affcc823cd

    • SSDEEP

      768:jbU+fE3t4RmvWX0Yn89R5vnRfwJ/9OKd+7XCMFP5enLG:0+fE3t4RmvWX0Yn8Hf/iG

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      VanillaRAT-master/VanillaRat/Forms/Main.resx

    • Size

      6KB

    • MD5

      0eef2c47b0e013207513314d2d347261

    • SHA1

      5623a009d681bd8ec190556ac9a31be67f6cc450

    • SHA256

      d6fc7679fd8b6ec480208c78c43683c73436bd234958a4dd988c439fab660815

    • SHA512

      83dc4371556ac990d4ac95c2a8709e27b6b2dff97e7bee122bb46cab05d7188f805db589e7de52109aa08cb3727d204d184f90b3fad76c64f5bf8ef64e28f268

    • SSDEEP

      192:Zf+tLPfYnLvFVOiFQaUD7UYbawthbawGbaws:Zf+tLPQnLvDOiFQXD7UOaw3aw8aws

    Score
    1/10
    behavioral29behavioral30

    • Target

      VanillaRAT-master/VanillaRat/Forms/NotificationBox.resx

    • Size

      5KB

    • MD5

      96ba0a444d087ae06f32319ca4f0a3e4

    • SHA1

      e3e08973b3d47c1ad51ccb133315b6242e275f0f

    • SHA256

      4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6

    • SHA512

      571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

ratvanillarat
Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10