General
- Target VolkUI.exe
- Size 9.6MB
- Sample260628-vk4bbsat4t
- SHA256 ed3f56a73cae11af670fca777c328e5f9cd88c329b47f22f4c1f594bb7dde3b9
- MD5 d377945dc71f033fe3ec8e0294c7158e
- SHA1 26c10350e45edbf24ee31d501c77aadb09bbe90d
- SHA512 ec913f1bf56ad7eb2d20f6abd1a81b14e844814d42efd336c018827a11117aff7e61d6ee27ad6d33f37b454857113fc14007410d108128e75396c89ae63c730f
- SSDEEP 196608:pf1kxdPzneIgfeg6y3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:N1GdPzneIgfeg6y3W9NkhyTZq04a+2c
- TLSH T108A61216B7A401FCD477C178CA5A4B13EBB1B449133166DF2398866A2FA3AE11F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VolkUI.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
VolkUI.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target VolkUI.exe
- Size 9.6MB
- SHA256 ed3f56a73cae11af670fca777c328e5f9cd88c329b47f22f4c1f594bb7dde3b9
- MD5 d377945dc71f033fe3ec8e0294c7158e
- SHA1 26c10350e45edbf24ee31d501c77aadb09bbe90d
- SHA512 ec913f1bf56ad7eb2d20f6abd1a81b14e844814d42efd336c018827a11117aff7e61d6ee27ad6d33f37b454857113fc14007410d108128e75396c89ae63c730f
- SSDEEP 196608:pf1kxdPzneIgfeg6y3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:N1GdPzneIgfeg6y3W9NkhyTZq04a+2c
- TLSH T108A61216B7A401FCD477C178CA5A4B13EBB1B449133166DF2398866A2FA3AE11F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.
-
Checks whether UAC is enabled