General
- Target VeloStrap.exe
- Size 15.3MB
- Sample260708-kljcfaew3k
- SHA256 da0c5c185b5b06fd65cc65d6baf9174f68dedcc4c1591736126416a3b89bf667
- MD5 58eee8548bb0ec4aa8809e8d17ee7f9d
- SHA1 56eaf6f280671a9198ea511e115e2be65f01d420
- SHA512 db144a0141c3b6877dd712ec744a00e6d8f4a465596e348e6b1874753448a1928b3b476e4bb89781e5470506c3d5accd1b942005218460509884c9703c435fd4
- SSDEEP 98304:6dlJhHIAUxdS+TsNYasWmc1BsGE+ZmD3tSOYoHwfLk3vSmaR0+Mc4AN0edaAHDff:63/HDU24sfsWVLsh+ZJObAbN0E
- TLSH T157F67D4523FC2635E3F74B35A970621A4D76BC1AA912D78E1B887A1D1A72780CCF0B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VeloStrap.exe
Resource
win10v2004-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
VeloStrap.exe
Resource
win11ltsc2024-20260706-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target VeloStrap.exe
- Size 15.3MB
- SHA256 da0c5c185b5b06fd65cc65d6baf9174f68dedcc4c1591736126416a3b89bf667
- MD5 58eee8548bb0ec4aa8809e8d17ee7f9d
- SHA1 56eaf6f280671a9198ea511e115e2be65f01d420
- SHA512 db144a0141c3b6877dd712ec744a00e6d8f4a465596e348e6b1874753448a1928b3b476e4bb89781e5470506c3d5accd1b942005218460509884c9703c435fd4
- SSDEEP 98304:6dlJhHIAUxdS+TsNYasWmc1BsGE+ZmD3tSOYoHwfLk3vSmaR0+Mc4AN0edaAHDff:63/HDU24sfsWVLsh+ZJObAbN0E
- TLSH T157F67D4523FC2635E3F74B35A970621A4D76BC1AA912D78E1B887A1D1A72780CCF0B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger