General
- Target VolkUI.exe
- Size 9.4MB
- Sample260628-w43dtab12q
- SHA256 37f9128e95a73eb4f27bad897233b136af91b0cd3ab8764947a5a18b209e386d
- MD5 18a081fd48a72a50f0281c5b331de6b1
- SHA1 9c381b9b2a2b6fb6d448612382ca3c87bbdc5458
- SHA512 ac575641866190fcec2da76b0e50144c0bc1a2e46ae6bb7bbbf23fd280c8caa55448ee3f633f6cc83bb16fb4292d157595d9c891e4ea039462a7ef1d455420bb
- SSDEEP 196608:+D3vC7OhXCoOSsV3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:avC7OhXCoOSsV3W9NkhyTZq04a+2c
- TLSH T18CA61216B7A400FDD077C178CA464A13F7B1B449273166DB23988A6A3FA3AE11F3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VolkUI.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
VolkUI.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target VolkUI.exe
- Size 9.4MB
- SHA256 37f9128e95a73eb4f27bad897233b136af91b0cd3ab8764947a5a18b209e386d
- MD5 18a081fd48a72a50f0281c5b331de6b1
- SHA1 9c381b9b2a2b6fb6d448612382ca3c87bbdc5458
- SHA512 ac575641866190fcec2da76b0e50144c0bc1a2e46ae6bb7bbbf23fd280c8caa55448ee3f633f6cc83bb16fb4292d157595d9c891e4ea039462a7ef1d455420bb
- SSDEEP 196608:+D3vC7OhXCoOSsV3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:avC7OhXCoOSsV3W9NkhyTZq04a+2c
- TLSH T18CA61216B7A400FDD077C178CA464A13F7B1B449273166DB23988A6A3FA3AE11F3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.