General

  • Target
    Desktop 2026.06.30 - 01.32.16.05.mov
  • Size 9.8MB
  • Sample260701-wry6mads8w
  • SHA256 a10e5562aae5d891b45bb6448c7b3930cc1a72f93a1676768f40175fca28db66
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://voltexecutor.pro/x

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://voltexecutor.pro/x

Targets

    • Target
      Desktop 2026.06.30 - 01.32.16.05.mov
    • Size 9.8MB
    • SHA256 a10e5562aae5d891b45bb6448c7b3930cc1a72f93a1676768f40175fca28db66
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks