General
-
Target
https://download2302.mediafire.com/tn70ji1l0yugsRQMc5sFjDDLjbH-EqEHH6TjzEl-xetjxOEGoO9R2HAhNVMqMFRyHfKSSCcLJhrmzifJo5XDPneAk4HBeBROsrnwHPyLiRebBumXjQnvadv6A56g0gZlbdJoTeqD0pI8IyW1JBwu8Z-F3tZyshqREc5GbOx3RHV4Ayqe/v04wcs9dlfq5ke0/VanishRaider-main.rar
-
Sample
250305-t7f9mstj12
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://download2302.mediafire.com/tn70ji1l0yugsRQMc5sFjDDLjbH-EqEHH6TjzEl-xetjxOEGoO9R2HAhNVMqMFRyHfKSSCcLJhrmzifJo5XDPneAk4HBeBROsrnwHPyLiRebBumXjQnvadv6A56g0gZlbdJoTeqD0pI8IyW1JBwu8Z-F3tZyshqREc5GbOx3RHV4Ayqe/v04wcs9dlfq5ke0/VanishRaider-main.rar
Resource
win10v2004-20250217-en
Malware Config
Extracted
phemedrone
https://api.telegram.org/bot7213845603:AAFFyxsyId9av6CCDVB1BCAM5hKLby41Dr8/sendDocument
Targets
-
-
Target
https://download2302.mediafire.com/tn70ji1l0yugsRQMc5sFjDDLjbH-EqEHH6TjzEl-xetjxOEGoO9R2HAhNVMqMFRyHfKSSCcLJhrmzifJo5XDPneAk4HBeBROsrnwHPyLiRebBumXjQnvadv6A56g0gZlbdJoTeqD0pI8IyW1JBwu8Z-F3tZyshqREc5GbOx3RHV4Ayqe/v04wcs9dlfq5ke0/VanishRaider-main.rar
-
Phemedrone family
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-