General
- Target VolkUI.exe
- Size 9.4MB
- Sample260628-wsr4psaz7s
- SHA256 00cee6cca019cbf0d41073971ad4191ebb1cd7c35a2ff0c915c98c9956a0527e
- MD5 3e61060a4badbc96e56711e7e456ef5a
- SHA1 b71253027a5df33ab28e836141298a807eb247ef
- SHA512 a62b3d514fce04a7d8b27e5522f045a51c7cf0444dc46c04bbdbc0b99713bb34abbda05c99f47929b73e9816a152db09af397bcf3def018c1380804a01037daf
- SSDEEP 196608:r97+fAxIIPFLSXo+3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:d+fAxIIPFLSXR3W9NkhyTZq04a+2c
- TLSH T1A5A61216B7A400FDD077C178CA474A13F7B1B449273166DB2398866A2FA3AE11F3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VolkUI.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
VolkUI.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target VolkUI.exe
- Size 9.4MB
- SHA256 00cee6cca019cbf0d41073971ad4191ebb1cd7c35a2ff0c915c98c9956a0527e
- MD5 3e61060a4badbc96e56711e7e456ef5a
- SHA1 b71253027a5df33ab28e836141298a807eb247ef
- SHA512 a62b3d514fce04a7d8b27e5522f045a51c7cf0444dc46c04bbdbc0b99713bb34abbda05c99f47929b73e9816a152db09af397bcf3def018c1380804a01037daf
- SSDEEP 196608:r97+fAxIIPFLSXo+3Dexl9N3lihcxTwZqy304gVLSsZEsnnc0IF:d+fAxIIPFLSXR3W9NkhyTZq04a+2c
- TLSH T1A5A61216B7A400FDD077C178CA474A13F7B1B449273166DB2398866A2FA3AE11F3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.
-
Checks whether UAC is enabled