0265e7baacdd1ff590b0ef5885e3e0422aedef7d37a25ee644b807b633c30711

Sharing

Copy URL Twitter E-mail

General

Target
Velocity.rar
Size 33.9MB
Sample260723-j3hlssgk5v
SHA256 0265e7baacdd1ff590b0ef5885e3e0422aedef7d37a25ee644b807b633c30711
MD5 580e7364d0bea246ecb31b19ed5528ef
SHA1 1736265e68c997475e3384cb0e26935ed072f862
SHA512 60cce95c4e679fa8e95289895b975e1263beeee7986fdb51decd5638a4c0dc63f665cc8df2fd3bd54cf3b53f40891f066550b38919476e98876f7dd803efd906
SSDEEP 786432:T05eW9r8iQsDY0Hwecmmx9iptGxojjcxz2fFdpYDdiHSMkSd6Tb:Uh8NGMEQoHgq9EDdiHff0Tb
TLSH
T1CC7733124A5CD822036A35B9F2E5098DEBE7DFDFA94BA31827985FC12F03944CF6C525
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Velocity.rar
- Size 33.9MB
- SHA256 0265e7baacdd1ff590b0ef5885e3e0422aedef7d37a25ee644b807b633c30711
- MD5 580e7364d0bea246ecb31b19ed5528ef
- SHA1 1736265e68c997475e3384cb0e26935ed072f862
- SHA512 60cce95c4e679fa8e95289895b975e1263beeee7986fdb51decd5638a4c0dc63f665cc8df2fd3bd54cf3b53f40891f066550b38919476e98876f7dd803efd906
- SSDEEP 786432:T05eW9r8iQsDY0Hwecmmx9iptGxojjcxz2fFdpYDdiHSMkSd6Tb:Uh8NGMEQoHgq9EDdiHff0Tb
- TLSH
  T1CC7733124A5CD822036A35B9F2E5098DEBE7DFDFA94BA31827985FC12F03944CF6C525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Bin/current_version.txt
- Size 5B
- SHA256 206620a657f1ccc8af72b866fdcef20e641c48f39ce27f338ce8313949c63e53
- MD5 acb766c6067f046105f8b1263b9e5172
- SHA1 94dcef061335413abfdb9c1ca0b391b7bf178b90
- SHA512 5c9b14ed8bca2cdaf7affc12d077de33a519e58ad2beedfaab2f4cc9b35c8952a48167d8719e5f4005c444d6ce729e743364266c5de63af00305b194ae46eb29
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral2
- Target
  Bin/erto3e4rortoergn.exe
- Size 4.8MB
- SHA256 1b02c5483cce852befbc4dac343cd498308e295e65ce6adeee8b5a244bbe0ad6
- MD5 074e307d0a2dfffd721c8e978f2afa56
- SHA1 6891153e30dfbd7f558344dafd8ddcb9180d9fce
- SHA512 89b26e97d49ff7ae7a0578a6dc09ea56eb55d152f305bbaef2aa492ad30a8305365219f407bc471e778812ae0922665b24d11f77bbe1422279cd8fd5c41ecc91
- SSDEEP 49152:Q7vAwP2alAj8Qpk6i2OmT+RHyJdT7mViya2ns+I1g0DcBexe:IvLs8ZRS9QeQBexe
- TLSH
  T16236EA1F91D53344C90A30B52ADED932FEF22C452E14D5C642A2B1A7797E8EBCE74329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Microsoft.Web.WebView2.Core.xml
- Size 566KB
- SHA256 d2e44139c2e8e30fecb99112516964143be130c58960a2c65cabc6a2a7c35ca0
- MD5 d1757131496940abcc30af78d34598a3
- SHA1 446944afcdfaee9c22320e1f80e9ff43de92e6fc
- SHA512 c779c90b4e6b6d54bd745954185659e9eb5c76e72cb2222f373a3b0d3ad3de4307a5b306e6832a4d721b2da3836851b05655c6e90f944488674cddbc5cb66ae6
- SSDEEP 12288:rWynTLhgqUDx4OfmwT2DRG3Vt5InEvs//BKoeUvSRyGOtQ/AgJSeLdLGz40cS+jw:CNcoUCF2
- TLSH
  T1FDC43F01668CD6310DF50ACA69B8B6D8FF2D666731D3AA21348C0F570F739A2E1BF591
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral4
- Target
  Microsoft.Web.WebView2.WinForms.xml
- Size 40KB
- SHA256 96e468637ee3322db9851e38c0a3d7c32f0d11f60566b47ace2c91ec66179ac8
- MD5 8b30e596b9d8ec30b3f82c03941b23a4
- SHA1 c74d93633c1d669a60372f003368963a68981692
- SHA512 22419fc31380173cde3a66509db763254eebb211ea3923dc8f504fb4204d6db649e63ae6809eb84c4214576410e69f5bfe166658439890df6ac63310dceadc5b
- SSDEEP 768:3OsdyK4aSPgPxW3uyCG4yCGdryCG/L+GZiyCGRL+P1xb9zU4QPgcRJFXCfPgKehN:3OsdyTaSPg5W3uyf4yfdryf/LzZiyfR/
- TLSH
  T114130C01A28DC72249E21ACE19B0E4D4FF2D677775D6EE11384C4B560F73EB0E2AB291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5
- Target
  Microsoft.Web.WebView2.Wpf.xml
- Size 139KB
- SHA256 8932fe759bb7afd1e0de73682a9577d782048a68b252408e127cf767fc348be4
- MD5 547ebbf40b254728354b371a5beb3ca4
- SHA1 730f1d32c4145739f5865c0bbef6c3e2fd91139b
- SHA512 ad7a8d85decd87a913b94a8cbd9651389f61a3090a5bc0fe06ff2445149de59e8fde911af729a6dd65b3f0f973a6dde6250528023c36f4bb2a39ef214c7feacb
- SSDEEP 3072:xOsSyTa4PgfmLC4uyD/D4yDC4dryDJtLryDnLfryDYO/LPm8RLP9R3Ly1vb9QUXK:xOsSyTa4PgfmLC4uyD/D4yDC4dryDJtJ
- TLSH
  T185D3EC10A28CD62248F657CE2AA8F4D0FF2C266735D3DA15304D5F161F77AB1F2AB291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral6
- Target
  Scripts/Infinite Yield.lua
- Size 98B
- SHA256 0d4c6ca6f3d473c9fe81f3952ddd76796b5cc8def107219a5b6dd9de4618744c
- MD5 e0246b17ddf86c45719e881d09987d64
- SHA1 797d7322d3b11d9065f6ddea181d63e1e82dbac8
- SHA512 ed989e87e89c2fd17f98a855fdc63f70d4a275c9c8e566b7f547b484b185c3f40f9a94fd1d314ff9c8f70f6f4223106bcfeda12a53676e9e98e62351872d9f7b
- TLSH
  T197B012BFD411926E0F3254C8481230D8CA30D42CCAB2C0E6D2FD4468917350BE030915
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Scripts/Super Ring Part.lua
- Size 62B
- SHA256 22187c09dd80d317d973f991f8dee965aea0b80364e29b48a60249a51264b53e
- MD5 9838019261aaa051aef34e4f53c4b962
- SHA1 01604c54cd83b621be2ecf36e42ec2ad0f0dba27
- SHA512 fade24e6cd6a610135ed6ce9408e564e11428bc481a7d969b512236367bd89d8f837a51830d9a79f63c303aba0a1639a96af7436f8862aaef321287c7a1c08db
- TLSH
  T1D2A0222F8880B20C03B3A28CCC0F3208CE22800C0C30E0A380AF803082230E2A82B000
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  VelocityApi.dll
- Size 21KB
- SHA256 9945bf0b137c9f60e4fdd18e8d77b1e7c874936d6993d9e29b70820ba39a607c
- MD5 3d3059e39636ddd2ffcbddd4d162da54
- SHA1 c19b0f304637ea162799850d03617d021121e7cb
- SHA512 8756ec8ab8782ac734bb5cedc3b9ae2a6a87a167e2b23d59ede7e4b1b64eb3cb1d32b5fd62ced093e3dde9c164a1e26295e1b36818fd4b862a0337db832d999a
- SSDEEP 384:hBwpwnR3zxm2p6iThnjsL3BHsxxSIRtJa+hLuv266mNEQEQrzdaYU6Ud:n62R31BjOHcDRnryVVu
- TLSH
  T185A218087BF88265F5FF8F786CB082100677B9166432FB4D1CD251A92D7BB904A90B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  VelocityApi.pdb
- Size 15KB
- SHA256 66b9a07080e7024268a2139c4d97a683f54d9cad4935cecb8edaa22f58305b70
- MD5 c40df810762c1293eb6bf12992c8465c
- SHA1 ffc22afc0c7a7e92513764b1ef560d8d26cd1ee6
- SHA512 0900b42f0c3c858ef829f4c847801d221d3b1ae7eaa9a4f1c43b449a4799b9f115d9459666b18be7dd334632f408e9b0e1ed103874b95eef479c78b4041b11d3
- SSDEEP 384:6YCDCaaArmLoLFw2/sfaIvz1d+bShoDRnfUJoqiWNDKrpQHRfax7EsHS3U3Bucxi:6N/awmLUYoMhd3QZg
- TLSH
  T1F672C3379B5CE265C9952A325836C2CC77B1C3202716EF3AF0D86668EDAF74A07B1174
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  VelocityLite.deps.json
- Size 4KB
- SHA256 e28716662c6aa158eecf9dcb2171990abe0fb62e847c8949d11b181e0c9a3dd3
- MD5 cf140d04ea6cd51c541a5ed38177d6a9
- SHA1 e3dd3bdc07f509af18e4a3ea22c34dd9bbd2badb
- SHA512 d123fd4b6e5d64e1626da9d66ef5b1f8e8c2ac05d64a856daea81f270f42c50ee05bd217897a7786b48200bc2b20c1b85617ec02a3aaa4e087b13f2aa5c3caf2
- SSDEEP 96:tjn+smsGAcUb7PqZw3uwGhorDgZFTsqxGI6:tyQb78hffc
- TLSH
  T14191461BE8544D6744706BF6587646C1FA96136F60405E8B78FC162C8F73EE6A098F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  VelocityLite.dll
- Size 18.6MB
- SHA256 3867a2b72d32cf68210086edf0c94305578c3dbadbeb3f2bdabb3f79888bd9f7
- MD5 69674db1e8505fc001ba1bb544ffdfcd
- SHA1 10b7d17291d38a6fc5280c5db2e071290a53c068
- SHA512 b3d9d78c3a4369f6b948ba7f49f2259c5d59fbfceed6c989345d8fae762e4b343e814cc1b424eccc82d75ee4b7cd892b0f6aa7819ea03425a1d609955341636d
- SSDEEP 393216:pdtwpHrmXuabdwVorMb975j+ssedCCxr0DGfRJ9A8q:pTwpHrI1gowb975j+SCCxQJ8
- TLSH
  T100171247F389DE2EE25B1B3686730394A6359CA1BF5B030FA41A76B8AD733C01D146D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  VelocityLite.exe
- Size 232KB
- SHA256 c4c0b8e1593bc5481521cecfce00b953e3ee6d7323b98e7ddf2e8c90a78ce545
- MD5 e4df8ee6e755c3da3088701eb1c05b76
- SHA1 c52dbc1190b84555e27649b9b54746b958e5f3cb
- SHA512 623ae06db60f42e33c6e94b4d74a20d6e456a1edb94e2b8bc58424532f27bc5baa516465cad455bddc0351e21614d4965919a123b7cb0891b8527021928a09d5
- SSDEEP 3072:IlDJk88wN1QI7sxrYL1peQ3lOY9SkHNwG7NzaAT56Q7BQz:UAIwxrI14Q3kYBTM5QNQ
- TLSH
  T185341903B65890BAE1A2D638CD928981E7727C594F71A6CF37507B7E0F766D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery
- Downloads MZ/PE file
behavioral13
- Target
  VelocityLite.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/manifest.json
- Size 135B
- SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
- MD5 fbebd68ecaa98928909421f66909c054
- SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
- SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
- TLSH
  T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  VelocityLite.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/protocols.json
- Size 3KB
- SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
- MD5 1de85fec2dfcc28011a7c2aaab95eb5f
- SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
- SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
- TLSH
  T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  VelocityLite.exe.WebView2/EBWebView/BrowserMetrics-spare.pma
- Size 1.2MB
- SHA256 439292e489a0a35e4a3a0fe304ea1a680337243fa53b135aa9310881e1d7e078
- MD5 1045bfd216ae1ae480dd0ef626f5ff39
- SHA1 377e869bc123602e9b568816b76be600ed03dbd0
- SHA512 f9f8fcc23fc084af69d7c9abb0ef72c4684ac8ddf7fa6b2028e2f19fd67435f28534c0cf5b17453dfe352437c777d6f71cfe1d6ad3542ad9d636263400908fd2
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral16
- Target
  VelocityLite.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/crl-set
- Size 22KB
- SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
- MD5 d01869348d5a783f61f90cbb27b82a78
- SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
- SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
- SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
- TLSH
  T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  VelocityLite.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/manifest.json
- Size 113B
- SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
- MD5 7ef3c71464d0fef472bc1d81fd363c62
- SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
- SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
- TLSH
  T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  VelocityLite.exe.WebView2/EBWebView/Crashpad/settings.dat
- Size 288B
- SHA256 ffc851f642e5efcda7acb62a1b5ea85492ae3ad712dd1ba6e664619f5cc75dfa
- MD5 f73627e16f111869c93ba0a4f64ca2f1
- SHA1 ece82f500758128e835116a4459276e036357f46
- SHA512 f2a904896815fc6f5d531b822f31dc89575129ffc343945e163e5764f2ed344d50e98e833d75bd3859453a4e276ec7fe1c8a5159f8c068144fe3b457f956d9ff
- TLSH
  T1DCD02233BA002DE8C9A538711101A4182A10E90A43018302E1A68A7E4A009E8C8824C3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  VelocityLite.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral20
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/BrowsingTopicsSiteData
- Size 28KB
- SHA256 71a956cf71030a295cc2e0ee4694be069de8739d39150dee5ce685eff32f75b7
- MD5 09671248d0b6e16b257b9d044a9dad55
- SHA1 1fb22d2d1ef4991291322fdb5e611368486c6e50
- SHA512 f67349c7f16ffd39a88210f043f378025550ad203b8fe7b2472aad4bf94857d6e14a13fa36ee1822bac5f53526ea79d05f099ddc2f60cb14dc42d1cf5de4f77d
- SSDEEP 12:TLiqidW5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwas:TLi65byqkiXBzlRr6hkc6UwccI5fBG
- TLSH
  T1CCD29B8A5F32E951CAF0D63BB0C0867A9B34A2198BC36D931B1110328F83401983B47D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/BrowsingTopicsState
- Size 414B
- SHA256 e5979282fdf54305ed537e9442ee6a52df6868d20437191bbee91ad31734e653
- MD5 7a55ef64b9eb1912dbf31289d39e81a9
- SHA1 0ea8b86a07b658f9a708a29108a77655d84cf69d
- SHA512 c0e40c81926d7e043bc658aec101ffdd67485a9f42689d8e08f5b7ea821a289c65dd6e1396559aab9ad86e346fc34037920c0816ca2cf3503e5c9b27c29ec426
- TLSH
  T19FE02BAFD821EC3728FE073CA1904385E65113973750594B7A3C82098FF0A3A0595D5C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
- Size 44KB
- SHA256 81cf4f6a105075a10ad1806d56961a235cf220da35987d5ea757a50f345654d6
- MD5 e079acd800bc08b48ee118232f0d808c
- SHA1 3dae87d4da016d8b9bf1a3ef63d9f837d01710ff
- SHA512 3f8ab3744903af15ec69a6eb8819498ad71cf02e88fde140c54c008ce3e247cfb1f9a52de73e282ec99568e682d3e335cc3c07cb7318282c09ec2a4931ec0652
- SSDEEP 3:MsFl9tlGallBMa39ikfls5aM1QKWSHK/9/1VBDipQZlmXl1yQX:/F3XGu/Me9ikNs5H1169J8ulmX
- TLSH
  T1251392AF65833D26EA911039A88B86F777368802E631035B02702A6378087AA288D400
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
- Size 264KB
- SHA256 bdae4b00a5cf943160711f62fa98fcfeff74b9e7c5dfa33219103ecdc7355e57
- MD5 5a9cc7537f842229b5e7302a894b6594
- SHA1 b5526143de7ec9021d8e89d2f2e8e3a5add14e5b
- SHA512 346313dd2fa6fb0db95eb41c4d7f6a0a8f6de0f4c9493228e163498ab86ac054cfce54aef12d3c044052f48a82612fc5e95e84c8212f4beafd89b04e2a0cc268
- SSDEEP 12:U/VkUG1Qx/oOqe1tDE8Oh8EIht60EdMGYCGU0Oa:D1u9rPE8gPIH6JMGYCZRa
- TLSH
  T12F4459BB2B611E01DA29023A762602A97D1FC1547D53D7C7F03122CD7CA067352E27C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
- Size 1.0MB
- SHA256 be1e6a4015723dcf9273f02446e5139e8e2a8dfa4d5ffd773d4ca8b70a5454e1
- MD5 2e70ff235c5025bb9c652f4013f5c933
- SHA1 5e1cb7fbe18038c23f65f9edc0fabfd2b8bd07b0
- SHA512 4265858fcd7cbc0f8c1191ee7ca8f183817e44062a379d59c31e761150519871500caddbea8200d81eba26163ab104377b1e1fd7575fd626d0767701159a000b
- SSDEEP 48:EYfjpmK3Zq8c1MJ5v1zhf9HBVGyqIfBsDFSy+pzS1jv7bJgmVKeD895PW8ST:57QwkdMvdzx9lqs6wzG77ceVT
- TLSH
  T19425D79BAB20A6C1CFB345BAE0D8FE576F7161365A6B9CC295110CDE98C73D9170100F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  VelocityLite.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
- Size 4.0MB
- SHA256 b51bf573bef863cf21a5da6b103bbdcb17b77b7c3907b8efb02d2d3add5a97b8
- MD5 5c3d10b84aec0ad55d2a188215e8018b
- SHA1 a36dd435043c5ac89d4e5c36ed4e381cd92bf19c
- SHA512 0f579f851e626293a57c18bf7e5d1fae90ca623a4fce25cd4dd6364e9a9a422adb1f4b397b15b93ffa99e4ac214faba1ae85bf6a9c486d1b4ad9c7fa79ba0d2e
- SSDEEP 384:jKxxebxm+bLYEjn5insQy3iEbjUC2fFWsJiSF4umdX+KQd8Xi:mu7L75Sg3im52fFWsJourKwwi
- TLSH
  T16516C0D9AF206200DF825E3564D8FE212F71926CE5165EC2D1A3463DEEC93F2878A40F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  WinRT.Runtime.dll
- Size 516KB
- SHA256 bcf3a14e8712a90837fc5c0d8c8a24696af2bd7f74e9767597ec81ededfb23db
- MD5 edb1f8d15fe41838cd449141187ae032
- SHA1 c7344afcdaced6911ab5288b0ade76f66dd41203
- SHA512 5756ccbafa1440d114f8d9b163ea0c2678300ba24c9979b837ba232cc6813f74a29fc0a23b9bc1d7f53c6ce5f15cdacd6804a755ac816116536c56cd9ca43c0e
- SSDEEP 12288:A4Yh4z+uZSlne+7/SQ2YaxhaNHav96iTtqen:HRSucPTx2YaxhaW
- TLSH
  T12CB44A80A7FD9A1AE7BE1334B03416144B71FC17AA13E39F674895B81D637998E40BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  XamlAnimatedGif.dll
- Size 98KB
- SHA256 557f3e03f38beeae6e2c6c554afe6c7a763843f3571e7ba4afce75dc70a182a9
- MD5 80a78bc47019df113af3b69bb19c1110
- SHA1 2f5968aee35e12dc89ced1aa2490fe8f45b04990
- SHA512 757ce5da02f8d565643f2e6122ae736b931bb3e7d5f5f7676e07c42ac86e8abc4521b759371883f6b326a3529e2916ce3eaed7642e15201e36161870e5d71ef1
- SSDEEP 1536:VHbNmCWH8u09u6kR7apGhHAL3kLvq7OY+hgbbZVoIl6cGGyd:V7HQ6iaghWwqyY+hgbboYyd
- TLSH
  T142A33B7483B98F96C79FB6FDE5B8939987358206681BFB4F690CA1DD24473E185002B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  runtimes/win-arm64/native/WebView2Loader.dll
- Size 142KB
- SHA256 df5816669f5123595c475d97929240d7d0e04f0bdc7dbe18af1dda42348b73a6
- MD5 835a45aa3b009e4690d636a02888209e
- SHA1 11cec522b6bc9637c40c139756439096d72389b3
- SHA512 37a13ad4b5c0a6da8cf233198294cd4180194d961f6fe56ab0cc7d5f2d2e690f97d9c4fedd513088c11a584a11758ac1eed275aedc29fbf56b408cfa408d3c94
- SSDEEP 3072:MT6aRLzkT4hiF41+Z8tqTANEtJkmHZI1d:lwLlhhEtJPZY
- TLSH
  T1ABE30A9376DD1953E2D3E73CC8678950232BBA794830CA4A7153114EDE6FBC0DEB4A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  runtimes/win-x64/native/WebView2Loader.dll
- Size 156KB
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH
  T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  runtimes/win-x86/native/WebView2Loader.dll
- Size 118KB
- SHA256 44ab92c2246ebfb5f98aa5726626fb44beb61543f2ef1803338af9fd295e63f0
- MD5 7b0eeac10cafb4acda98ccaf2f4b8eb1
- SHA1 9af3bdf0f62f6e4b3a936afc9b77fa9ac5a088d9
- SHA512 466b751a90d3b63e6394b47d459da70ee20eb7d6d40c48153996297e460fbaa02f32cab10b737fefd03a2ea62bd273025fc2ccde850faf42c904044c7ea8dab7
- SSDEEP 3072:F6JOAfv0Zj/zjziMy/4rnF4+jqb22EA2TNTEtJAfiPjezIgUW1:F6JNf89Q/In+qPEtJ/QNh
- TLSH
  T1FAC37B5075D080B1E5BE18390878EAB69B7F7990DF609DDB27841AA94F343D09F31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32