General

  • Target

    Velocity_free.exe

  • Size

    4.8MB

  • Sample

    231118-kwfdjaec2s

  • MD5

    acefecb22e0d70f7774cc6dabc33b13b

  • SHA1

    ded29b3652c143b10fd85f3f9ed84557eaa3a18b

  • SHA256

    accbd63c3e331e30f61f09bea91a4bea918687f50c62b12536869612a55ea981

  • SHA512

    0f8dc6f533b85fe5d1447622b86d801e8a098f48c8b097ab76e2f82370165b5734f98a1caddabaa258c041c0bf1a2f8d47eafe880c7c65636944983319bfddb3

  • SSDEEP

    98304:XVxffb2hAzA69NBI8Nw/VedIPuZtF71c/M:XVxffboAzA2Gd2IUzCM

Malware Config

Targets

    • Target

      Velocity_free.exe

    • Size

      4.8MB

    • MD5

      acefecb22e0d70f7774cc6dabc33b13b

    • SHA1

      ded29b3652c143b10fd85f3f9ed84557eaa3a18b

    • SHA256

      accbd63c3e331e30f61f09bea91a4bea918687f50c62b12536869612a55ea981

    • SHA512

      0f8dc6f533b85fe5d1447622b86d801e8a098f48c8b097ab76e2f82370165b5734f98a1caddabaa258c041c0bf1a2f8d47eafe880c7c65636944983319bfddb3

    • SSDEEP

      98304:XVxffb2hAzA69NBI8Nw/VedIPuZtF71c/M:XVxffboAzA2Gd2IUzCM

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Enterprise v15

Tasks