General
- Target VanadreamsLauncher.exe
- Size 6.1MB
- Sample261102-mx6cfssxcy
- SHA256 38fb6ce51af4a9985b15a4711e8797904a33f97c92f0a4b296378cbef277e1e1
- MD5 cb97de41ef14d84d71d750fd87dd01a9
- SHA1 af2c30b1f353030fcc39711ae9746aa5a21e6d49
- SHA512 8913b56104497c87ad228cb47bf26463ae707ce7778408003a7b5c6042aa6f1654119ca33202704c1c26e6bea3d968c5c5e44261305f8af158e06b9d8df622a4
- SSDEEP 196608:0X3bELiRYgS9wz/vyu4Yi0fZ5N8olSP1qT:0X3b29wjKu4fEAMStqT
- TLSH T171561211A2A44126E1BF0F319C751244DAB27A0B1B75D6CF369C7A9E1F723C2D9B0B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
VanadreamsLauncher.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
VanadreamsLauncher.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target VanadreamsLauncher.exe
- Size 6.1MB
- SHA256 38fb6ce51af4a9985b15a4711e8797904a33f97c92f0a4b296378cbef277e1e1
- MD5 cb97de41ef14d84d71d750fd87dd01a9
- SHA1 af2c30b1f353030fcc39711ae9746aa5a21e6d49
- SHA512 8913b56104497c87ad228cb47bf26463ae707ce7778408003a7b5c6042aa6f1654119ca33202704c1c26e6bea3d968c5c5e44261305f8af158e06b9d8df622a4
- SSDEEP 196608:0X3bELiRYgS9wz/vyu4Yi0fZ5N8olSP1qT:0X3b29wjKu4fEAMStqT
- TLSH T171561211A2A44126E1BF0F319C751244DAB27A0B1B75D6CF369C7A9E1F723C2D9B0B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.