General

  • Target
    AVLpilot-Velopack-Setup-1.2.8.exe
  • Size 49.7MB
  • Sample260727-t657daxbnf
  • SHA256 d322265c012dcf97710c268e826c4442f6af8e61f710c99777f381f50c9ac01d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      AVLpilot-Velopack-Setup-1.2.8.exe
    • Size 49.7MB
    • SHA256 d322265c012dcf97710c268e826c4442f6af8e61f710c99777f381f50c9ac01d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks