641552853d20e6e3fddef3fa6c2fde8707b68b19b03e2dd4903c7c775c63bcde

Sharing

Copy URL Twitter E-mail

General

Target
VanishRaider-main.zip
Size 39.9MB
Sample240619-tp4bfstble
SHA256 641552853d20e6e3fddef3fa6c2fde8707b68b19b03e2dd4903c7c775c63bcde
MD5 d37ce8cc7a7764872f64f1ef0684eb90
SHA1 0d75ff189c9ff5d657ec9c050a7b5a2e9470b6d6
SHA512 192b028ec425dd5420104681e3684a9f3194585a31b6ed64c4b834ca82dd8bd9b41524b1d8a57f48076cf43a654c5054da631a2cfedc2c24b64f033e13b23b61
SSDEEP 786432:JmqLlW1n4nb7Hpw5FAYx7/aFh3tJsQq/HZOSx4EXwuCc6kPwq:cqLkl4nb7HK5FAsSFh3tJFq/07EXJ6kr
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

pyinstaller

Malware Config

Targets

- Target
  VanishRaider-main/HELP.txt
- Size 694B
- SHA256 58668785a6f2973bb89a3d420dc62a1507aab9dd2526729eaddb2b82785c19af
- MD5 d8b35bddac033f31672e7b68f0917b7d
- SHA1 058ee23a2f4e6271f5cdb9229ab38da9b3cda163
- SHA512 6975e4b7297ea08bc293f101425e5d9b54bdb76798dec837f0254d35009142beb13a5411e879aade4ae5eb07b80c5ae5c3037e1f2c3f25477b3882a14ba7a1b8
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2
- Target
  VanishRaider-main/README.md
- Size 1KB
- SHA256 f5cab1f413523a7184b896974e43d43f9704e7b5e4d5e21fcdf5da06e7b61618
- MD5 77262b89c0edbe568d00b4b273a9b67d
- SHA1 e67423667f9621c5d2fe5450342b2794d8c7607a
- SHA512 54e9417a2033091ae58eed44eb66104338b19497048a32143185c0aead5c5d583ee80c31d70b19690a1e553e73dac2e9a69beb3e93787b9bbf26f53c6b12f946
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  VanishRaider-main/Vanish.exe
- Size 40.3MB
- SHA256 8f1047e9d3a102aef242e96caccc328ee6581e3aa0938a26ee433c821276c1ea
- MD5 e93af3c13bbba237beedcfb12bf4bcb2
- SHA1 e275ba9480df0ff294f2200b03e819da25679f81
- SHA512 ceae1fd68f363f04e84bc1e661f9a2bd7b62b10a5ead6ba6bd2446da89dfb613c4ffeb614e9bdd0acae7d6aa2ffc8f7e23be621b25739fb201f2ff7fd6dcb344
- SSDEEP 786432:RWQtsm8NEFG8baD2j6+s7LWB75zupt5F056n+PmBHA+oEt1T:UQtx8NEFG8baD2qHWB75ifzqPmBMEt1T
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral5 behavioral6
- Target
  main.pyc
- Size 141KB
- SHA256 a4cb1e4e38a672919d96d7d557755bfaf0c029c795a719ccabc09ad56793e061
- MD5 d093e52c67a026dc61704a73befd8587
- SHA1 a590ee278ec5b3c1c35d95bf503909c66db9401a
- SHA512 09bf266d7f1e963b771b1474c3fc689b91d24ab856296e4a72cf27bd56aac8308589f0b336561477eff189e83f1f8f11a1a1f2f3db57687a0e3887629c22c9ac
- SSDEEP 3072:oOlFvhXMhYQiPYaCSNFUqGM7fUz73qYgO/QngI3t1WE:Nlh8hZa7qM7ISQs3WE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  VanishRaider-main/requirements.txt
- Size 67B
- SHA256 180acbec533ae024b39346ecfd17f32fde7845e0142ebd29d4b7c47afa8c312f
- MD5 82b7f281497b320b767a40f96164d343
- SHA1 78edaeb06641e29f5afb10749a3d315c1360b055
- SHA512 377c99cf455fdb3175446a347f56894e515e6126c971dc0296074c565df5b15bd22c3967d3ac9684887f33d74bfbdf4a5d30c308f259b3f08586a11bc4f76022
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  VanishRaider-main/scraped/what.txt
- Size 31B
- SHA256 7083819176f1f776dd1b6eaed4c30714c6ec75b68415c74b0ad738ef252c4676
- MD5 a68988f7d7fcee0adde93fc88d553943
- SHA1 e7e95f7beaa3ec8b6eea41f6c6289970421a99d7
- SHA512 c744ceb0a4cf2241e357cdf9587091d3145c73f663d8e284b86a081a99a6d2649c0d990f1111ad7e5ed5375afc0a2e21021adc13b0278fb37d97bd604c401ca2
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  VanishRaider-main/src.py
- Size 117KB
- SHA256 c639e24837d454b65002a1ef26e176156b419020ce21eb02d2170204e6d72ec9
- MD5 6d6c43dd517eb918c9a159e0d70f6af5
- SHA1 3b21a24445b9ae57466bc899d786ef0b45d151ad
- SHA512 e0a27cdd14ef51c1f3b6a631a9f8c9c256e5c2a19d07c7db478e77da2e88e3f91e1b5ce9ce51d6188545b09142e89f2c4d07d11a4d2d408a65c751609246e377
- SSDEEP 48:bssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssu:G
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  VanishRaider-main/start.bat
- Size 53B
- SHA256 7d8faa0857a32fa875367998572eb5a0404cae0a11e34beca1efc16e7c1454b1
- MD5 f852804c49d6334530b82b3c1cf0efa4
- SHA1 34a62d58c044a3e63ca72c60ff424aa833af17a4
- SHA512 4929905adb66b8bc3782dfc4b598d6f159b8b8fb32f966d46a44c2d92a258b45746a6c456b3f0aad016e3b0205d2c50fbfe77dbdab983ddaf88c70185fc4f83f
- MD5 SHA1 SHA512
Score

7^/10
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral15 behavioral16
- Target
  VanishRaider-main/stuff/invalid_tokens.txt
- Size 2B
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  VanishRaider-main/stuff/stuff.txt
- Size 2B
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
Score

1^/10
behavioral19 behavioral20
- Target
  VanishRaider-main/tokens.txt
- Size 150B
- SHA256 b367244de9f766d744c128036f134393436550cb2a9551e3b34372cbf8cfb637
- MD5 d47fcc00ca94a9f385c2f18b48cdd5dc
- SHA1 35445e37353aa47608b0933e9dfbfcf738d508a1
- SHA512 7fe992100f14b353abff30c7bc8929a5e2bebe1865363a583955ad6d4d65738f1ba4f309606e9fa3b4fb8d738d5bc5359220c4dc5dfaa29f6ce0be5328157ff0
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  VanishRaider-main/vanish.ico
- Size 4KB
- SHA256 eb92a3f8ebb06b22a90815f344cf011063e9b2c31f4dca591d4c2dcc8be6aa03
- MD5 1fc2966af71f9831ca3280a9123a818a
- SHA1 e926c9b1a8315984553562d29d9c21c55362aeeb
- SHA512 743fcf1aefc795f84aed96c1bb73c3ba37428b13f5585e4b219f74454010d17d9e8f5e9b84a8450135883c4fa851efdd82ac08f8e8dd042ca881291788664e66
- SSDEEP 96:2foxDLlllTPPqZ1zhwTbtttS4P0XHGBTxxxxxxxxxRxxxxxxxxxxxxxxxxxxxxxJ:2foxHlllTXqSTbttdP0XHGBTxxxxxxxB
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24