Overview

overview

7

Static

static

3

VantaBot.exe

windows10-2004-x64

7

VantaBot.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    129s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/10/2026, 23:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    VantaBot.exe
  • Size 76.4MB
  • Sample261020-3caytabs5m
  • SHA256 433d50f8f6dbe2d6fc2b05fd6735ec6fcdb861e2bb34d0f847ead25b2eb2fb14
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VantaBot.exe
    "C:\Users\Admin\AppData\Local\Temp\VantaBot.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4340
    • C:\Users\Admin\AppData\Local\Temp\VantaBot.exe
      "C:\Users\Admin\AppData\Local\Temp\VantaBot.exe"
      2⤵
      • Loads dropped DLL
      PID:5516

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\_bz2.pyd
        • Size 81KB
        • SHA256 62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\_ctypes.pyd
        • Size 120KB
        • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\_lzma.pyd
        • Size 154KB
        • SHA256 60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 015bd08815c7b934a8952c3a7578e9ce59f21136e8a880d42bbd414bec2c6058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 5534812cdbdae94ba45cb216e5eb9af686b853948df54365103555abbbaf9d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 837d2b1b2cd03e03fc6ccb050698b6b5763af17c201304872342a5eae9e0a2d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 de43b165f568c276c00e95acd454e3092f352a18e95874595f4f4658c06d2ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 3cebc45bf479ad74cfabf2c6bfd4994d7ad639ed1221025981d19cedf9ce0416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 5ef70308bcca628ce6b0e2856b15b1c7ae340c3f9bbbc4c1071d8c191a34a5c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 250ac829f2617bcac1c6e5b8c4f630462e20765863ba573526a3e11bbfb94a9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 ae14079a114733f60ce87b92cba42acd8083c2cd67594e53bc37dc0b97a4b465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 914bf26a298713119477ea0a8e7bd43171b91344ebe24fb47ad77c49686e3d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 ab5489955e371b15f77906c08ec3c7affe2c7a46a08c514ca628768b4478974b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c70f9644d8377fa39c5b71f2e9734c1400d7598904fdeb772e8502099982dcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 f8129710188e407bb0e6f46d30aeba277d67b947ece5fe09e883fde2323f3ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 22KB
        • SHA256 5200b16cb2ddc61cfc07373a9a84aa85a3ab50806ca96c879c883275832944c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 48786fb88b001dcd1f63acea903d3ca9cc0b3060d5a325e3f2f3cbc3bfd53166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 9ec3898f7eba91faa28b51616c211a2689e3a13aeef8de6e13cb674e49d689eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 3a6cbc524c99e1cd80d5368f5601402a37ad602528b1ab628093573ef638eb3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 97145ef89c44949fcf0f04ac834a8bc7d687ef49ee73ae9fc32f3c11136b7201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 8bc7c10b1851aea644e9c9f381cdb935e091fee6b0be3d3aedc6fffaac96adb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 d8030b777617c71f0f94564607699dbf7561487d779db9756aed378c5675213f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 f5e676713340f73a03a3d41a6ec9883b431da7d16c7f07bd0a920fb80e6c0753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 f023d47e44d3eea6b0743580f57e8c6ba81e79d5ebfa7da26250076c647b980e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 9746d8930704153578a628c010638a5f818ffe5a927e25591b108e256dc6afca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 7c53ae24c982d16ffd1bf7f918d115b11b7f30e57bc7feaa18cb9781e4abb926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 56d9d62ca5dba79a6581b8d574a7d8b2a64a5ecb71e47dcf06ed0285708b1859
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 f6482bbec5612c39ecb4822787a333f2b7570f7a5f922a4059be41ba957bb372
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 272d02765fdd3582618236c2d309abba069642f9bc1062ede069d0c144e17007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 8a0900788859d0eb51c2f48f50cc6ed376a120b518100fa20e11d7702ccde260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 ff35de6c03812b332e140f17dade25c5dd4775156da9eeb1eaae3fddd27236ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 191ef3e98641a57296f19d572d8eb62489470ff1ef6030d136af170c2f835173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 54ee5ec719a051496ff60aa00dbeaa94b9a7d2cdac27fe9b7317f1a666b6a2aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 8b94662429171019fcd63c70bbf2095a075170599704a5e7dcdbe3da13f3a429
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 39e5929593709e8af3bc9e0a75ec1155778d6f4a247f4cdfc58928ad6db88434
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 5a8ecebac32edf4e1f3c5c6c1c8ea1a1add6cda4f9c9cb26f752fb295bea6865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c71080cbcb43bf1f8f3e391deb12a582eb0abefc80946f340675a2c616e4feb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 6c68648e524187e03c4ad9aaa4a99113c6ee9f29fb39cc0ed93f951975138e63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 d4fbcccbe29371cbce431e43b2eb4f7ba9a6f04a3d740a071f02457a505e9dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-private-l1-1-0.dll
        • Size 74KB
        • SHA256 29bf3d90617d3781d19b332d6ceb9f20ba5ce082ec74bf6c34d5d4aee56e48a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 47c1935942e3ac0812e4dcf18c0e265e565f0194a3349111c299712f5565f7ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 72adc1b3677e0814d9c4ebf0964000e84bb2acf67336c8963061665e44f78029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 900afc3989673c9bb1a687ed38c192f46db9e6ba6d11a668898a539e7fc23798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 fcf12466cc12fd3b73611fc0763a5a1f9d44e90349513c34a0c83b0f36421793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 886e57c4a6adb299b38f02945369f590a67da4e79a798359fc60aaa067212d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 5f8f26b216ade615b67a41f6fbbb910972fc6153315a65bb8f09912be50215b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-eventing-provider-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\api-ms-win-eventing-provider-l1-1-0.dll
        • Size 18KB
        • SHA256 0f68a71f19b458260d2bfab16b1158945079a115d01582288c9cdcfdc20c4556
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\base_library.zip
        • Size 859KB
        • SHA256 e2813ff3090a5973a9183dfc6377e2a994c2bb7310f882ba4f14536680b4b0c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\config.json
        • Size 899B
        • SHA256 f5dde1015f39832c6d6835a832cfb41f6bfadfbb6dbb091ecf7d115c1e00b8a3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        inference-manifest.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\inference-manifest.json
        • Size 200B
        • SHA256 025bc9884b470a6f5899b83aef541e3a553fa3dc70ce4d5334e4e927620f0e33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\python3.DLL
        • Size 64KB
        • SHA256 dc909eb798a23ba8ee9f8e3f307d97755bc0d2dc0cb342cedae81fbbad32a8a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\python310.dll
        • Size 4.3MB
        • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        INSTALLER
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000010f42\ucrtbase.dll
        • Size 1.3MB
        • SHA256 3239227d27667ba20d10a880751924e5719de0078f9fce232d149d383f7681f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5516-275-0x000001A2A3E00000-0x000001A2A517B000-memory.dmp
        Download