General
-
Target
http://www.mediafire.com/file/v04wcs9dlfq5ke0/VanishRaider-main.rar/file
-
Sample
250121-nmz85a1mey
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://www.mediafire.com/file/v04wcs9dlfq5ke0/VanishRaider-main.rar/file
Resource
win10v2004-20241007-en
windows10-2004-x64
22 signatures
150 seconds
Malware Config
Extracted
Family
phemedrone
C2
https://api.telegram.org/bot7213845603:AAFFyxsyId9av6CCDVB1BCAM5hKLby41Dr8/sendDocument
Targets
-
-
Target
http://www.mediafire.com/file/v04wcs9dlfq5ke0/VanishRaider-main.rar/file
-
Phemedrone family
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Drops file in System32 directory
-