Overview

overview

7

Static

static

3

VeloSniper....0.exe

windows10-2004-x64

7

VeloSniper....0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

velosniper.exe

windows10-2004-x64

6

velosniper.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    VeloSniper_Setup_v2.0.0.exe
  • Size 9.4MB
  • Sample260806-mexbtshp7v
  • SHA256 e8e6b1e029aa042a16f545dd6f4b50b3d8df93f71f2679e5db41def1d2e2a44b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutiontrojan

Malware Config

Targets

    • Target
      VeloSniper_Setup_v2.0.0.exe
    • Size 9.4MB
    • SHA256 e8e6b1e029aa042a16f545dd6f4b50b3d8df93f71f2679e5db41def1d2e2a44b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecutiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      velosniper.exe
    • Size 17.5MB
    • SHA256 814123871be121feac62db50883fb664597d6ace3b020aae8db616d441cdeea2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecutiontrojan

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks