General

  • Target
    VolcanoExecutor.zip
  • Size 32.2MB
  • Sample260802-heflvsvvcs
  • SHA256 832598b4fa84058a438966ffc8214f49fbc246e6478f483eccfcea70fc45b86e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • VolcanoExecutor.zip
    .zip 32.2MB
  • VolcanoExecutor/VolcanoExecutor.exe
    .exe 2.4MB
  • VolcanoExecutor/libiconv-2.dll
    .dll 1.1MB
  • VolcanoExecutor/libintl-8.dll
    .dll 301KB
  • VolcanoExecutor/libpcre2-8-0.dll
    .dll 711KB
  • VolcanoExecutor/libwinpthread-1.dll
    .dll 25.6MB
  • VolcanoExecutor/msvcp140.dll
    .dll 540KB
  • VolcanoExecutor/ucrtbase.dll
    .dll 1.3MB
  • VolcanoExecutor/vcruntime140.dll
    .dll 120KB
  • VolcanoExecutor/vcruntime140_1.dll
    .dll 46KB
  • VolcanoExecutor/zlib1.dll
    .dll 128KB

VolcanoExecutor.zip

  • SHA256 832598b4fa84058a438966ffc8214f49fbc246e6478f483eccfcea70fc45b86e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
volcanoexecutor