General
- Target Volt Executor.exe
- Size 2.0MB
- Sample260703-c1xjlsfs2m
- SHA256 336102ea6f657d10053053310967ce7baf7c7c8ccfd8f7d68b25169a1b484a82
- MD5 0f7526d49f8982a746ee0c9fd9e3b45b
- SHA1 e5a308f871c2e63fa80fc267579e9c96bd5aa100
- SHA512 46eaf5bd9968ca3050d11549f55e269cfc9b437f199eb4ea0bf1a2f56547229167497d95a10f771446afc0588b4dfe15b1554fab2ab517b3b396efca3f94a574
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIrgvjxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ9UM:4uI2h341Hu8x/3ok9bz4pICVmkZ866mN
- TLSH T1E1A5C03FF28B653EE06A16367A72A110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Volt Executor.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Volt Executor.exe
- Size 2.0MB
- SHA256 336102ea6f657d10053053310967ce7baf7c7c8ccfd8f7d68b25169a1b484a82
- MD5 0f7526d49f8982a746ee0c9fd9e3b45b
- SHA1 e5a308f871c2e63fa80fc267579e9c96bd5aa100
- SHA512 46eaf5bd9968ca3050d11549f55e269cfc9b437f199eb4ea0bf1a2f56547229167497d95a10f771446afc0588b4dfe15b1554fab2ab517b3b396efca3f94a574
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIrgvjxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ9UM:4uI2h341Hu8x/3ok9bz4pICVmkZ866mN
- TLSH T1E1A5C03FF28B653EE06A16367A72A110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1