69f1ca991564395011ed56712271cfe8f57e2cf7c82cf186a1c45a6496da0a79

General

Target
volt-installer.exe
Size 11.1MB
Sample261110-pr4yjsay6s
SHA256 69f1ca991564395011ed56712271cfe8f57e2cf7c82cf186a1c45a6496da0a79
MD5 75bdfc13b09dbf0600746edddc83353c
SHA1 0f41b9b35a7abbaba867bb81230013dc326422f6
SHA512 47aed221de2ad2cb4c928f230a981a3d9cd369bbfbb4319cc2c68c512871e4547a6d2dd6a6f384865a8a3bb16351a17b10981bd5b335acb1ceaa6217d134da01
SSDEEP 196608:tpGo/ZpFCGuQk5WHREe7vwl535dds/T+IfTMLnKG3NvB2uKBCG2EUjHnUueA0:t0oRHYwR7Dod5P2T+GYL3NJ2XBL4HUuu
TLSH
T1C2C63373AE30C9EAEB4C3E738E544A56DA7D763744CC8D840615EABD705C1D82AFA8C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  volt-installer.exe
- Size 11.1MB
- SHA256 69f1ca991564395011ed56712271cfe8f57e2cf7c82cf186a1c45a6496da0a79
- MD5 75bdfc13b09dbf0600746edddc83353c
- SHA1 0f41b9b35a7abbaba867bb81230013dc326422f6
- SHA512 47aed221de2ad2cb4c928f230a981a3d9cd369bbfbb4319cc2c68c512871e4547a6d2dd6a6f384865a8a3bb16351a17b10981bd5b335acb1ceaa6217d134da01
- SSDEEP 196608:tpGo/ZpFCGuQk5WHREe7vwl535dds/T+IfTMLnKG3NvB2uKBCG2EUjHnUueA0:t0oRHYwR7Dod5P2T+GYL3NJ2XBL4HUuu
- TLSH
  T1C2C63373AE30C9EAEB4C3E738E544A56DA7D763744CC8D840615EABD705C1D82AFA8C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  lsp/luau-lsp.exe
- Size 6.0MB
- SHA256 43dc7a51985872f83cd2f644cabf251023158b432a7cdcc795ac1b36dab3462a
- MD5 e44b9ebe7211e3aa6ff3bab4f8c8451a
- SHA1 4d0406042cf46fb776eea8645635d21f8cc50308
- SHA512 ce57f9592ec2086a1ddad05d6e0edc4a13f243e47ccb12cab5bfe3939ce4565a8a360c55992afd3799af7bd50d992309d4ca565462bbfde6b60e10713a0a99c5
- SSDEEP 49152:NsY0bbZDDDDDD7H5c7G9or26czNvOgPQqWv9UHtS3XLZvdfEfPgp1LY078qWcHGy:Pifc7GXCn+361QjvQfyom/BOa
- TLSH
  T112565C3B629801FCE0BBC179CB5A9953D772300A0331AAFF05E145A66F57AF45E7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  tauri-app.exe
- Size 14.5MB
- SHA256 93ed1c16ff9061dac4be42ca76f3cb85c2bac792d820ebee716f768f5c69055b
- MD5 6ba3f2a5a6ac3d6668da88e5f42ccaea
- SHA1 5578be8c19ab97e047351fc0b6f08003db5f61ad
- SHA512 b97144ed445e03cee3268df2337e3a6d57897827670379a5ee526c1fea024602a2b346219147e0f0c543df92d4a790d5387c044386d30ded119d72d4708c07bf
- SSDEEP 393216:cVzFvL4xH2ihKKnbaOlYJ5URvLLjZWsE+:0pShKkaOlYJa1LLFWsE+
- TLSH
  T1F5E6AE03F39581E8C0AEC5B8C31AA637EB72B88D4521B29B5BE45F112F26F506F1D359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3