Overview
overview
8Static
static
3Velocity.7z
windows10-2004-x64
1Velocity.7z
windows11-ltsc_2024-x64
8Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
6Microsoft....re.xml
windows10-2004-x64
3Microsoft....re.xml
windows11-ltsc_2024-x64
8Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-ltsc_2024-x64
6Microsoft....ms.xml
windows10-2004-x64
3Microsoft....ms.xml
windows11-ltsc_2024-x64
1Microsoft....pf.dll
windows10-2004-x64
1Microsoft....pf.dll
windows11-ltsc_2024-x64
1Microsoft....pf.xml
windows10-2004-x64
3Microsoft....pf.xml
windows11-ltsc_2024-x64
8Microsoft....ET.dll
windows10-2004-x64
1Microsoft....ET.dll
windows11-ltsc_2024-x64
6VelocityApi.dll
windows10-2004-x64
1VelocityApi.dll
windows11-ltsc_2024-x64
1VelocityApi.pdb
windows10-2004-x64
3VelocityApi.pdb
windows11-ltsc_2024-x64
8VelocityLi...s.json
windows10-2004-x64
3VelocityLi...s.json
windows11-ltsc_2024-x64
8VelocityLite.exe
windows10-2004-x64
1VelocityLite.exe
windows11-ltsc_2024-x64
8VelocityLite.exe
windows10-2004-x64
8VelocityLite.exe
windows11-ltsc_2024-x64
8VelocityLite.pdb
windows10-2004-x64
3VelocityLite.pdb
windows11-ltsc_2024-x64
8VelocityLi...g.json
windows10-2004-x64
3VelocityLi...g.json
windows11-ltsc_2024-x64
8WinRT.Runtime.dll
windows10-2004-x64
1WinRT.Runtime.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
598s - max time network
438s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/07/2026, 04:08
Static task
static1
Behavioral task
behavioral1
Sample
Velocity.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Velocity.7z
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.Core.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.Core.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Microsoft.Web.WebView2.WinForms.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Microsoft.Web.WebView2.WinForms.xml
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Microsoft.Web.WebView2.Wpf.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Microsoft.Web.WebView2.Wpf.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Microsoft.Windows.SDK.NET.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Microsoft.Windows.SDK.NET.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
VelocityApi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
VelocityApi.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
VelocityApi.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
VelocityApi.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
VelocityLite.deps.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
VelocityLite.deps.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
VelocityLite.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
VelocityLite.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
VelocityLite.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
VelocityLite.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
VelocityLite.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
VelocityLite.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
VelocityLite.runtimeconfig.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
VelocityLite.runtimeconfig.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
WinRT.Runtime.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
WinRT.Runtime.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target Velocity.7z
- Size 19.7MB
- Sample260714-eql18sgs7t
- SHA256 f27865ff8f60776ebd4febc0d8528aa3530396d4e4534ebe2b4f765e047b05aa
- MD5 34be7067f85591003987566f89d44875
- SHA1 7f748c3bda15f3d0e4fde3328256dba7362cec91
- SHA512 4b3e5ad786992074a46467e85cb9eaec2de7d729d804ec358ab4c0e239a4a5d463464ba8d203cd8057eb45d2dd9f1ccda5db6784b4180a3fa4ff52a5066f7213
- SSDEEP 393216:xR3TMYTPpaIJz3HJedxrwR8+6k2MTYIh8ogjpH/yo+5JUYvaQTzVmeOj12BT:LoYjJz3HJePkR8XvIYIh8ogh/4vaqzHT
- TLSH T1EA2733F8AB8CF8ECB7C73B687D857AC900D446E34249CB30A967A724F2715A651F9530
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4168 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4168 7zFM.exe Token: 35 4168 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4168 7zFM.exe