Overview

overview

7

Static

static

3

svhost.exe

windows7-x64

7

svhost.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    svhost.exe

  • Size

    8KB

  • Sample

    230524-j7gkascb5y

  • MD5

    4a6cb489c4efaffebd4dba83af747c76

  • SHA1

    24e6fc552344533c4723638e3f3368a57d705012

  • SHA256

    5057465f9b1ddcd2548bea636a85c0a6c8165aab05b8613fd32dfc8b354fbf35

  • SHA512

    c0dc1d77bcc6bea00e2693849ec0e3728aa36c70a339202946c1b5f408e63d515417cca876ee88a76725d348c58fa7580f58147ecf08456a96a6a6304ec6e72e

  • SSDEEP

    192:f8N/6tVRd8JtsdUlb88TftHGzxnZZRVVmcm2:f8Z6Jd8plbTft2ZZRWcm

Score
7/10
persistence

Malware Config

Targets

    • Target

      svhost.exe

    • Size

      8KB

    • MD5

      4a6cb489c4efaffebd4dba83af747c76

    • SHA1

      24e6fc552344533c4723638e3f3368a57d705012

    • SHA256

      5057465f9b1ddcd2548bea636a85c0a6c8165aab05b8613fd32dfc8b354fbf35

    • SHA512

      c0dc1d77bcc6bea00e2693849ec0e3728aa36c70a339202946c1b5f408e63d515417cca876ee88a76725d348c58fa7580f58147ecf08456a96a6a6304ec6e72e

    • SSDEEP

      192:f8N/6tVRd8JtsdUlb88TftHGzxnZZRVVmcm2:f8Z6Jd8plbTft2ZZRWcm

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks