4914599219407bcee64b8c5b1cf5df7f988784adcb4818fc48b73caf10792ab5

General

Target
VolcanoExecutor.zip
Size 73.6MB
Sample260805-cmfc6stwgv
SHA256 4914599219407bcee64b8c5b1cf5df7f988784adcb4818fc48b73caf10792ab5
MD5 67032c0d9957466221c68944d90f85a1
SHA1 7db93b82e3a45aaaf5c9bde653c88d8babdfc630
SHA512 d3918b35cbec005fd6a09f6a696a2db58b71ccda2c5c6db19786f1b4c8f827f48c437769e766cbee97b91415f96a3a94f42f252db138c2beb69dee17d35f4f3b
SSDEEP 1572864:KPx4uXUTResWVoW+GbVQVP0PySD7Tsa498fQR1s7GfbHq7I5E+ZAXiBuU:KPxBXnq4WEBA94kC7GTK7H+v0U
TLSH
T185083319123818A4CB07623C64D622179CD6EE54A2F5EB7F9EC5CCD0F3AA1679E48337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  VolcanoExecutor.zip
- Size 73.6MB
- SHA256 4914599219407bcee64b8c5b1cf5df7f988784adcb4818fc48b73caf10792ab5
- MD5 67032c0d9957466221c68944d90f85a1
- SHA1 7db93b82e3a45aaaf5c9bde653c88d8babdfc630
- SHA512 d3918b35cbec005fd6a09f6a696a2db58b71ccda2c5c6db19786f1b4c8f827f48c437769e766cbee97b91415f96a3a94f42f252db138c2beb69dee17d35f4f3b
- SSDEEP 1572864:KPx4uXUTResWVoW+GbVQVP0PySD7Tsa498fQR1s7GfbHq7I5E+ZAXiBuU:KPxBXnq4WEBA94kC7GTK7H+v0U
- TLSH
  T185083319123818A4CB07623C64D622179CD6EE54A2F5EB7F9EC5CCD0F3AA1679E48337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  VolcanoExecutor/modules/themes/gradient_a_update.bmp
- Size 7.9MB
- SHA256 dd009ddc27d814cdc4fea2ac5f94922c5c1614b87c135d9274540367fd6ff83c
- MD5 fe8892ef2eef9b3363789e5eb498a4c9
- SHA1 f0b72c4973a201dd379a5311e60598b055d79aea
- SHA512 122a515fc64d2397050f1bb6833696effc99122d9f627c838defcd0bad63a29aec6bec243e17cb1010202f6336bffaa0c8f59bec5ab6c512b9bf0603786e1691
- SSDEEP 196608:0Ztka/lXK67HpEe0s5MIFLsqGDIcT1Tc09wsCYql71SH7e96V5zs:8tka/lXR755LsqGkcN2OHWas
- TLSH
  T12586330A50F9DF5E6ADC9F1B09E11AA3854FFD00E3F2CB3688819774E75621064AEF91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  VolcanoExecutor/vcruntime140_1.dll
- Size 46KB
- SHA256 7a39c755041c5cfd1d6ef976489f04f251f6acd28faf62a0e6fb363eb76c3ec9
- MD5 eccbf238660abb9c85471bdc8c52bd7c
- SHA1 6ec302ad0d7c31938feca6c133ab6ea9e22cc4a3
- SHA512 3f124f8b17123d4f123bd8973b90742f343fa75a9d084bfa31b113a2bd87dcfba20c7e8ae2c6f361b60ba9563dc0fad207184554d071dafa141783d82654dbd3
- SSDEEP 768:10j2o0yhdQxbg905470oFpT6ZHI91LyzRklFTBPTIq303tEbRfLIE12zPI1:10j2olqxs2G7nfT6ZHgVFTZTIrqbRf9l
- TLSH
  T1482302EDA0B627D6A0FA23152375A7C2270544BD1C0DB87E8F77389C1BC26F0D69A661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6