General
- Target volt free.exe
- Size 58.2MB
- Sample261026-pp2qeasx5l
- SHA256 5ee137159a41ccacaf124c40b669a0f4e02cf0522c9da3a4dc274856fdfdd479
- MD5 6660584b51cff34bff28454ece7210ff
- SHA1 5230196ef42d4c1238618880cc2a4501c0c96a21
- SHA512 87a181c0b7b5c541cb177054875ea2082fa98239126ec24f2d600d6b84ba8dec6a74ba05f4581ddf29e1a67895cb465d27c7c9a87e6597504d8e4cb558d6c4e9
- SSDEEP 1572864:zqrTIAikXJVrvo2pUg9NoX0RpoPhu+O73odyn13P:2pv7ig9NXqcVN
- TLSH T1AAD733A03F0682E1F8E7413E5490963571E6B4F26FA493EF12F811462CA72D64D3C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
volt free.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
volt free.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target volt free.exe
- Size 58.2MB
- SHA256 5ee137159a41ccacaf124c40b669a0f4e02cf0522c9da3a4dc274856fdfdd479
- MD5 6660584b51cff34bff28454ece7210ff
- SHA1 5230196ef42d4c1238618880cc2a4501c0c96a21
- SHA512 87a181c0b7b5c541cb177054875ea2082fa98239126ec24f2d600d6b84ba8dec6a74ba05f4581ddf29e1a67895cb465d27c7c9a87e6597504d8e4cb558d6c4e9
- SSDEEP 1572864:zqrTIAikXJVrvo2pUg9NoX0RpoPhu+O73odyn13P:2pv7ig9NXqcVN
- TLSH T1AAD733A03F0682E1F8E7413E5490963571E6B4F26FA493EF12F811462CA72D64D3C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1