General
- Target voltv2 (1).exe
- Size 18.8MB
- Sample260831-3dch2azgka
- SHA256 ae7457280b05bd47bdcf1bff67218ddd2a652741bf91cbf32f7ddc5af43df0ac
- MD5 996d92f5506d581bf47570bdf7ec501c
- SHA1 2dbc0a51394744107326e32ad7f7352fb35ff7ab
- SHA512 5b5159ea7e0b9c1791273157965ce842dc8c100e9217ce078cbc4dfed872f2665fef71decca59247e24782b5f493dee7f6e88735c191bb4365256cf8081b6d97
- SSDEEP 393216:oI8lpXEAphVtZ510MjU9npASi6IOtGjKyHWgodjPZv/r5WZ0K:oIuRph/10M6mXHO4jPHWgodhv/r5WZv
- TLSH T1E017331CB61010FBF9BA403E4AD6D8A1E3E1B7110F96C2DF16A017643F7B6A45E7C6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
voltv2 (1).exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
voltv2 (1).exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target voltv2 (1).exe
- Size 18.8MB
- SHA256 ae7457280b05bd47bdcf1bff67218ddd2a652741bf91cbf32f7ddc5af43df0ac
- MD5 996d92f5506d581bf47570bdf7ec501c
- SHA1 2dbc0a51394744107326e32ad7f7352fb35ff7ab
- SHA512 5b5159ea7e0b9c1791273157965ce842dc8c100e9217ce078cbc4dfed872f2665fef71decca59247e24782b5f493dee7f6e88735c191bb4365256cf8081b6d97
- SSDEEP 393216:oI8lpXEAphVtZ510MjU9npASi6IOtGjKyHWgodjPZv/r5WZ0K:oIuRph/10M6mXHO4jPHWgodhv/r5WZv
- TLSH T1E017331CB61010FBF9BA403E4AD6D8A1E3E1B7110F96C2DF16A017643F7B6A45E7C6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (163) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory