General

  • Target
    https://volt-bucket-geoeoqnffde2n.t3.storageapi.dev/ui/1.0.14/ab681603-821d-44c2-b20d-44517b2656dd/volt.exe?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=tid_TblQQAtoUfioJcNgXgtSUIgfEUOdptdmUqnggUktJtZBoDrURn%2F20260909%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260909T212526Z&X-Amz-Expires=900&X-Amz-Signature=1c873c9c8ecfcff6f131761caca3ebb2b27abaac670671727b02b46a1be40f00&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject
  • Sample260909-1bk2aaar7s

Malware Config

Targets

    • Target
      https://volt-bucket-geoeoqnffde2n.t3.storageapi.dev/ui/1.0.14/ab681603-821d-44c2-b20d-44517b2656dd/volt.exe?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=tid_TblQQAtoUfioJcNgXgtSUIgfEUOdptdmUqnggUktJtZBoDrURn%2F20260909%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260909T212526Z&X-Amz-Expires=900&X-Amz-Signature=1c873c9c8ecfcff6f131761caca3ebb2b27abaac670671727b02b46a1be40f00&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks