General
- Target AVLpilot-Velopack-Setup-1.2.8.exe
- Size 49.7MB
- Sample260727-t657daxbnf
- SHA256 d322265c012dcf97710c268e826c4442f6af8e61f710c99777f381f50c9ac01d
- MD5 bc2631d6b86b3aef28ecdb167c978da2
- SHA1 625c653c8e44a2ae6b261bd77ffcc4e15a32e703
- SHA512 99d669da9716624928ebdedee2b4f17ae5da86e99df5ba52cc1106f7dc6d459b011edc460e57072adbd90646c394e388f317037818a4c9b2d91e3e1a67803db5
- SSDEEP 786432:0liO4tEq0nfjMseny/YJZh2347WcjKKRaETZ11ob7lBootHUVZV3gDVLvb01sm0Q:W4tEq0rPeyQI34b+KkEwL90pwK1smd
- TLSH T1F9B73361FE41E0FFD48A02B5E43EFB3DBB3651A68B2988C356994D4868E13A05C1735F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AVLpilot-Velopack-Setup-1.2.8.exe
Resource
win10v2004-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
AVLpilot-Velopack-Setup-1.2.8.exe
Resource
win11ltsc2024-20260709-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target AVLpilot-Velopack-Setup-1.2.8.exe
- Size 49.7MB
- SHA256 d322265c012dcf97710c268e826c4442f6af8e61f710c99777f381f50c9ac01d
- MD5 bc2631d6b86b3aef28ecdb167c978da2
- SHA1 625c653c8e44a2ae6b261bd77ffcc4e15a32e703
- SHA512 99d669da9716624928ebdedee2b4f17ae5da86e99df5ba52cc1106f7dc6d459b011edc460e57072adbd90646c394e388f317037818a4c9b2d91e3e1a67803db5
- SSDEEP 786432:0liO4tEq0nfjMseny/YJZh2347WcjKKRaETZ11ob7lBootHUVZV3gDVLvb01sm0Q:W4tEq0rPeyQI34b+KkEwL90pwK1smd
- TLSH T1F9B73361FE41E0FFD48A02B5E43EFB3DBB3651A68B2988C356994D4868E13A05C1735F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.