Overview

overview

10

Static

static

10

VanishRaid...sh.exe

windows7-x64

10

VanishRaid...sh.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VanishRaider-mainextract.me.zip

  • Size

    72KB

  • MD5

    cec935dcddb4221e5bae730b55dbc906

  • SHA1

    9d9e0c3091905a2ff216b1ee6bbecf315e87c040

  • SHA256

    d00ec945953c4a7aa8a9f29b39acd08bcaf3fb72a721a7977eaa99438db96200

  • SHA512

    dcd315f192399b71bf75acc195419f54d1a82a49f74854a2f7c7c79f96d20c5b15f8e3e71efcee216eb3ade32c62cd27aafd08869c82cd9a78f3c87ccddc7b5a

  • SSDEEP

    768:BPtyale7TFIx3c1W+5vqlQsCcYtBk+iPxODMDytsvSoyPfQuC0dM58nbyX4HEU5Q:/3e7GmqlrCcYP65OoDy5ni0d3byXDt

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7213845603:AAFFyxsyId9av6CCDVB1BCAM5hKLby41Dr8/sendDocument

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VanishRaider-mainextract.me.zip
    .zip
  • VanishRaider-main/vanish.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • VanishRaider-main/vanish.ico