General
- Target Velocity.exe
- Size 30.0MB
- Sample260506-sdblmahv4j
- SHA256 993d58531d1f9c3d47ed2f18c4b8631a89d59fdf508fc116b127435fd4687a6e
- MD5 f4b02d4bb38846e6d82899c76863fd84
- SHA1 4cfdaedd4da048aedf6dd9cbc1c5812731f7dc2b
- SHA512 934638162c022287f4cade1b1ff8069edbc6483921dcc41da5cfaf564aee5e42c6bf20c57bcaf7dc37f67ec54e1de7678650d2323eb6f7bb51a041d65a12c9b9
- SSDEEP 196608:UtQ56WdpH6emXAroDOCu51ZTAFLzbjblIjvT7CThIPPBrYjPWDT:Ut6pHxmXfDFqAFLKnCTMGPWf
- TLSH T174678D22A3A44E3DC99F5773E4B603254335CA06AF43939E581CA69C1F933860B59BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Velocity.exe
Resource
win11-20260130-de
22 signatures
150 seconds
Malware Config
Targets
-
- Target Velocity.exe
- Size 30.0MB
- SHA256 993d58531d1f9c3d47ed2f18c4b8631a89d59fdf508fc116b127435fd4687a6e
- MD5 f4b02d4bb38846e6d82899c76863fd84
- SHA1 4cfdaedd4da048aedf6dd9cbc1c5812731f7dc2b
- SHA512 934638162c022287f4cade1b1ff8069edbc6483921dcc41da5cfaf564aee5e42c6bf20c57bcaf7dc37f67ec54e1de7678650d2323eb6f7bb51a041d65a12c9b9
- SSDEEP 196608:UtQ56WdpH6emXAroDOCu51ZTAFLzbjblIjvT7CThIPPBrYjPWDT:Ut6pHxmXfDFqAFLKnCTMGPWf
- TLSH T174678D22A3A44E3DC99F5773E4B603254335CA06AF43939E581CA69C1F933860B59BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1