General
- Target VolkUI.exe
- Size 9.6MB
- Sample260628-vrexbaat7z
- SHA256 b4aab9ce0c92d99b6106e357cfa203d25097d723dc77987c0160bdcdfc931350
- MD5 6b869a2ce2fe80947694c9080973f143
- SHA1 8abd70cdef4eaf8ba3ceaf7354aba41be152dce6
- SHA512 8157d3983bcec5d2f3d7d34117b67082d4841c433fcbbf592703c0f44c5ef82cca33518cd6f7b58a809f8535f38b247db629c9317af5e29d1572c7cfb6382d14
- SSDEEP 196608:9wDGkDJ08I2CVzJRA3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:CDNDJ08I2CVzJRA3W9NkhyTZq04a+2c
- TLSH T1CBA61216B7A401FCD067C178CA5A4B17EBB1B449133166DB23D8866A3FA3AE11F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VolkUI.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
VolkUI.exe
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target VolkUI.exe
- Size 9.6MB
- SHA256 b4aab9ce0c92d99b6106e357cfa203d25097d723dc77987c0160bdcdfc931350
- MD5 6b869a2ce2fe80947694c9080973f143
- SHA1 8abd70cdef4eaf8ba3ceaf7354aba41be152dce6
- SHA512 8157d3983bcec5d2f3d7d34117b67082d4841c433fcbbf592703c0f44c5ef82cca33518cd6f7b58a809f8535f38b247db629c9317af5e29d1572c7cfb6382d14
- SSDEEP 196608:9wDGkDJ08I2CVzJRA3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:CDNDJ08I2CVzJRA3W9NkhyTZq04a+2c
- TLSH T1CBA61216B7A401FCD067C178CA5A4B17EBB1B449133166DB23D8866A3FA3AE11F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.