VanishRaider-main.zip
- SHA256 204cb0c27462d479f8a7148518f66e2badc932c7521cf6bcc2bfae06936ea75f
Overview
overview
7Static
static
3VanishRaider-main.zip
windows10-1703-x64
1VanishRaider-main.zip
windows10-2004-x64
1VanishRaid...LP.txt
windows10-1703-x64
1VanishRaid...LP.txt
windows10-2004-x64
1VanishRaid...DME.md
windows10-1703-x64
3VanishRaid...DME.md
windows10-2004-x64
3VanishRaid...ts.txt
windows10-1703-x64
1VanishRaid...ts.txt
windows10-2004-x64
1VanishRaid...at.txt
windows10-1703-x64
1VanishRaid...at.txt
windows10-2004-x64
1VanishRaid...src.py
windows10-1703-x64
3VanishRaid...src.py
windows10-2004-x64
3VanishRaid...rt.bat
windows10-1703-x64
7VanishRaid...rt.bat
windows10-2004-x64
7VanishRaid...ns.txt
windows10-1703-x64
1VanishRaid...ns.txt
windows10-2004-x64
1VanishRaid...ed.txt
windows10-1703-x64
1VanishRaid...ed.txt
windows10-2004-x64
1VanishRaid...ff.txt
windows10-1703-x64
1VanishRaid...ff.txt
windows10-2004-x64
1VanishRaid...ns.txt
windows10-1703-x64
1VanishRaid...ns.txt
windows10-2004-x64
1VanishRaid...sh.exe
windows10-1703-x64
7VanishRaid...sh.exe
windows10-2004-x64
7VanishRaid...sh.ico
windows10-1703-x64
3VanishRaid...sh.ico
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VanishRaider-main.zip
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
VanishRaider-main.zip
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
VanishRaider-main/HELP.txt
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral4
Sample
VanishRaider-main/HELP.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral5
Sample
VanishRaider-main/README.md
Resource
win10-20240404-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral6
Sample
VanishRaider-main/README.md
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral7
Sample
VanishRaider-main/requirements.txt
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral8
Sample
VanishRaider-main/requirements.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral9
Sample
VanishRaider-main/scraped/what.txt
Resource
win10-20240611-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral10
Sample
VanishRaider-main/scraped/what.txt
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral11
Sample
VanishRaider-main/src.py
Resource
win10-20240404-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral12
Sample
VanishRaider-main/src.py
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral13
Sample
VanishRaider-main/start.bat
Resource
win10-20240404-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral14
Sample
VanishRaider-main/start.bat
Resource
win10v2004-20240611-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral15
Sample
VanishRaider-main/stuff/invalid_tokens.txt
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral16
Sample
VanishRaider-main/stuff/invalid_tokens.txt
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral17
Sample
VanishRaider-main/stuff/matted.txt
Resource
win10-20240611-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral18
Sample
VanishRaider-main/stuff/matted.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral19
Sample
VanishRaider-main/stuff/stuff.txt
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral20
Sample
VanishRaider-main/stuff/stuff.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral21
Sample
VanishRaider-main/tokens.txt
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral22
Sample
VanishRaider-main/tokens.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral23
Sample
VanishRaider-main/vanish.exe
Resource
win10-20240404-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral24
Sample
VanishRaider-main/vanish.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral25
Sample
VanishRaider-main/vanish.ico
Resource
win10-20240404-en
windows10-1703-x64
1 signatures
600 seconds
Behavioral task
behavioral26
Sample
VanishRaider-main/vanish.ico
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
600 seconds
General
- Target VanishRaider-main.zip
- Size 18.9MB
- Sample240702-x49csszcmp
- SHA256 204cb0c27462d479f8a7148518f66e2badc932c7521cf6bcc2bfae06936ea75f
- MD5 b9909cb4d9f8e716fd6f46d376efc82b
- SHA1 4ef397aee04bce1351e2e1ea5d77edc64e84a8fe
- SHA512 b30cc5e4ca8992b1515462cc183cd3073de9c52dedbea7ffe191367cdc42ee0a5c73df682c0121bd5c87637f112826122bf7d94759f7eb06a36015b0a3510205
- SSDEEP 393216:4m5S5LM7yoRzAb268zciyfaw+dbb3zeKz/pYLdlsSx0ecOcmJESO:Nwayoto2fcpfawovzXbpQW2DJXO
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VanishRaider-main/vanish.exe
File Explorer
-
VanishRaider-main.zip.zip 18.9MB
-
VanishRaider-main/HELP.txt1KB
-
VanishRaider-main/README.md1KB
-
VanishRaider-main/requirements.txt67B
-
VanishRaider-main/scraped/what.txt31B
-
VanishRaider-main/src.py117KB
-
VanishRaider-main/start.bat53B
-
VanishRaider-main/stuff/invalid_tokens.txt2B
-
VanishRaider-main/stuff/matted.txt1B
-
VanishRaider-main/stuff/stuff.txt2B
-
VanishRaider-main/tokens.txt179B
-
VanishRaider-main/vanish.exe.exe 19.0MB
-
VanishRaider-main/vanish.ico4KB
VanishRaider-main/HELP.txt
- SHA256 d44e09e5bf8298926ad1b2c8f1dbcecf2d8bf68081c258c27fc336470f4196c6
- MD5 6bafaf5c8d2ce2a06ee5c4b760c254eb
- SHA1 2d5a061d2df5d59f8587058f14a97638c8656a7e
- SHA512 586e04bc121960fdf9f2b7f8fd067d83708d208859ef886629339bd8524335fe6c86b954ee0eb3065c79e717a8893be1cc2a3ec9d767301a13ee089cc93043c0
- MD5 SHA1 SHA512
VanishRaider-main/README.md
- SHA256 9d78448c38fafa627d24bd63548cc2db04964bfe258e84432f497aa7dfcfeaf1
- MD5 29286eb1a6e9fa92b8081343adcdbf17
- SHA1 1f8516c01b07fc3f2cd7e2b342c1a99b86a06886
- SHA512 d039cfeb6d6374d4b460849398a6df4f391f4cbcdef9127c80371ac7d9b23fbadc0ab5218617f295fc060566e98067b99fd2a5fd7a0df3d7d980ce407d9dcdb7
- MD5 SHA1 SHA512
VanishRaider-main/requirements.txt
- SHA256 180acbec533ae024b39346ecfd17f32fde7845e0142ebd29d4b7c47afa8c312f
- MD5 82b7f281497b320b767a40f96164d343
- SHA1 78edaeb06641e29f5afb10749a3d315c1360b055
- SHA512 377c99cf455fdb3175446a347f56894e515e6126c971dc0296074c565df5b15bd22c3967d3ac9684887f33d74bfbdf4a5d30c308f259b3f08586a11bc4f76022
- MD5 SHA1 SHA512
VanishRaider-main/scraped/what.txt
- SHA256 7083819176f1f776dd1b6eaed4c30714c6ec75b68415c74b0ad738ef252c4676
- MD5 a68988f7d7fcee0adde93fc88d553943
- SHA1 e7e95f7beaa3ec8b6eea41f6c6289970421a99d7
- SHA512 c744ceb0a4cf2241e357cdf9587091d3145c73f663d8e284b86a081a99a6d2649c0d990f1111ad7e5ed5375afc0a2e21021adc13b0278fb37d97bd604c401ca2
- MD5 SHA1 SHA512
VanishRaider-main/src.py
- SHA256 c639e24837d454b65002a1ef26e176156b419020ce21eb02d2170204e6d72ec9
- MD5 6d6c43dd517eb918c9a159e0d70f6af5
- SHA1 3b21a24445b9ae57466bc899d786ef0b45d151ad
- SHA512 e0a27cdd14ef51c1f3b6a631a9f8c9c256e5c2a19d07c7db478e77da2e88e3f91e1b5ce9ce51d6188545b09142e89f2c4d07d11a4d2d408a65c751609246e377
- SSDEEP 48:bssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssu:G
- MD5 SHA1 SHA512 SSDEEP
VanishRaider-main/start.bat
- SHA256 3007e52464e534449583e4a41aa5888c23bd58c2f907e911f738eb223fc10061
- MD5 e38e79cebbdfacf7ba682312476fbd35
- SHA1 b37055053de72e8cfb392cce72953ec476243d77
- SHA512 9dde6da21ca02ffeb0ee9cb0677cee51916ab5ed91dae575563617992a2b400c117b5e83350742fbb79cf65ef90ea1f40abc3d7e434e8be2b6ad71d403e0e19f
- MD5 SHA1 SHA512
VanishRaider-main/stuff/invalid_tokens.txt
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
VanishRaider-main/stuff/matted.txt
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
- MD5 68b329da9893e34099c7d8ad5cb9c940
- SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
- SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
- MD5 SHA1 SHA512
VanishRaider-main/stuff/stuff.txt
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
VanishRaider-main/tokens.txt
- SHA256 c9c12965e1d736ff74d8d7ecdee25a6b3bd667ea5f91a48cd96bfb9e47e5f3ef
- MD5 31fda412c04175cb811d717d6f8eb9cf
- SHA1 2a91d8687a7d701a62904969b915d852a1a1de49
- SHA512 014dd8f0174b7b0a870f7c433e58bda37e8df08b65f7fdebc62daff309c53078c7f5d4408de48ecf476e218159f729b13069c9e4060345bd62ddf7a588820ac0
- MD5 SHA1 SHA512
VanishRaider-main/vanish.exe
- IMPHASH 49c2299a8ec6070835185020b838c31d
- SHA256 baa5374f11450871e810e9530476bab4d0f1f0a41c30dd6bd848fcefafb0fa72
- MD5 c2972509f51fdcc069667a413e9074f2
- SHA1 1efab6b4e563d41681ea818330add46a4cadc247
- SHA512 29c70281d08060b319708e963840f1990abd884e66ae1e64b6fa6b816546c38871a7330b9d4d0a7e0462744d6033efb90eb97f02d6d29eab696d522e9347c1b8
- SSDEEP 393216:YkjuxBEtFRpSfO6Ewh91QUzadNH5TXGT1GngpTYZsgPu5weY2Psc:fekFRpSfhEU1LzadBdXhnrm5vDPH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
48044
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
SHFileOperationW
SHGetFolderPathW
kernel32
SetLastError
HeapReAlloc
CreateDirectoryW
SizeofResource
SetConsoleCtrlHandler
GetCommandLineW
GetStdHandle
WriteFile
TerminateProcess
GetModuleFileNameW
SetEnvironmentVariableW
GetTempPathW
FindResourceA
WaitForSingleObject
CreateFileW
GetFileAttributesW
Sleep
GetLastError
LockResource
CloseHandle
LoadResource
GetProcAddress
GetCurrentProcessId
CreateProcessW
WideCharToMultiByte
GetSystemTimeAsFileTime
FormatMessageA
GetExitCodeProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
RtlUnwindEx
WriteConsoleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
MultiByteToWideChar
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
Name
.text
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18.8MB
Virtual Size
18.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=29395,
count=141, id=261, version=29395,
count=10, id=260, version=29395,
count=2, id=253, version=31935,
count=40, id=261, version=31935,
count=16, id=260, version=31935,
count=9, id=259, version=31935,
count=5, id=257, version=29395,
count=113, id=1, productName=Unmarked objects,
count=1, id=264, version=32217,
count=1, id=258, version=32217,
VanishRaider-main/vanish.ico
- SHA256 eb92a3f8ebb06b22a90815f344cf011063e9b2c31f4dca591d4c2dcc8be6aa03
- MD5 1fc2966af71f9831ca3280a9123a818a
- SHA1 e926c9b1a8315984553562d29d9c21c55362aeeb
- SHA512 743fcf1aefc795f84aed96c1bb73c3ba37428b13f5585e4b219f74454010d17d9e8f5e9b84a8450135883c4fa851efdd82ac08f8e8dd042ca881291788664e66
- SSDEEP 96:2foxDLlllTPPqZ1zhwTbtttS4P0XHGBTxxxxxxxxxRxxxxxxxxxxxxxxxxxxxxxJ:2foxHlllTXqSTbttdP0XHGBTxxxxxxxB
- MD5 SHA1 SHA512 SSDEEP