3c2304ec9ccb14ee63cabd30e20c300afe685629485dbdc9a5e364511d613f38 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

VolkUI.exe

windows10-2004-x64

1

VolkUI.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
VolkUI.exe
Size 9.6MB
Sample260628-vf4rasaw3q
SHA256 3c2304ec9ccb14ee63cabd30e20c300afe685629485dbdc9a5e364511d613f38
MD5 ad05b7e6fb94da175d363dcbeb8c7a0e
SHA1 07df497504f021770173f2807162374ea62d788a
SHA512 43dbfa570816d6ecab917df0c7c80c434a31f9b79860da4be8817c11c973d1e1a6c4f66c01d774c1c6253be9b5899d6869c487b26b109b58839964077d9dc005
SSDEEP 196608:Qk1kxdPzneIgfeg6x3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:v1GdPzneIgfeg6x3W9NkhyTZq04a+2c
TLSH
T154A61216B7A401FCD477C178CA5A4B13EBB1B449133166DF2398866A2FA3AE11F3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

VolkUI.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

VolkUI.exe

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  VolkUI.exe
- Size 9.6MB
- SHA256 3c2304ec9ccb14ee63cabd30e20c300afe685629485dbdc9a5e364511d613f38
- MD5 ad05b7e6fb94da175d363dcbeb8c7a0e
- SHA1 07df497504f021770173f2807162374ea62d788a
- SHA512 43dbfa570816d6ecab917df0c7c80c434a31f9b79860da4be8817c11c973d1e1a6c4f66c01d774c1c6253be9b5899d6869c487b26b109b58839964077d9dc005
- SSDEEP 196608:Qk1kxdPzneIgfeg6x3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:v1GdPzneIgfeg6x3W9NkhyTZq04a+2c
- TLSH
  T154A61216B7A401FCD477C178CA5A4B13EBB1B449133166DF2398866A2FA3AE11F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery trojan
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Looks for Xen service registry key.
  defense_evasion
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Network Share Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy