General
- Target VanishSetup.exe
- Size 137.2MB
- Sample260605-pt98cagy2k
- SHA256 3baa37128bd2f53c7eaf2d843d377bbb84f51925e26006a2ea850b10c78cf8af
- MD5 23a88a244e3266aad45929b7fb260eb1
- SHA1 9b508ff165fe729f1dc1953cc3626e9dcc1f7d63
- SHA512 81d5ed01afc689d0482f89595f28cdf27f8bac361270c7c824bc9ab6672e36a05aad9bfe71c1312eda5f8c75369bbc432b033178fd5bc832a1ddb38e844d1765
- SSDEEP 3145728:jbQZij48zA6zntWj9iCfEg5Jhn1W1/HnZW7eeycbx3:jMZEjAmk3tJVaRSOK
- TLSH T1BC68332C0225CC1FC325FDB29A580F64B5DE7D702696D532E2B607F5E8BA9D3970A2D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VanishSetup.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VanishSetup.exe
Resource
win11-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target VanishSetup.exe
- Size 137.2MB
- SHA256 3baa37128bd2f53c7eaf2d843d377bbb84f51925e26006a2ea850b10c78cf8af
- MD5 23a88a244e3266aad45929b7fb260eb1
- SHA1 9b508ff165fe729f1dc1953cc3626e9dcc1f7d63
- SHA512 81d5ed01afc689d0482f89595f28cdf27f8bac361270c7c824bc9ab6672e36a05aad9bfe71c1312eda5f8c75369bbc432b033178fd5bc832a1ddb38e844d1765
- SSDEEP 3145728:jbQZij48zA6zntWj9iCfEg5Jhn1W1/HnZW7eeycbx3:jMZEjAmk3tJVaRSOK
- TLSH T1BC68332C0225CC1FC325FDB29A580F64B5DE7D702696D532E2B607F5E8BA9D3970A2D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.