General

  • Target

    svchostexe.exe

  • Size

    7.1MB

  • MD5

    716c1920c48cf67eb21212edea8ba36d

  • SHA1

    9427c93730422107832f42c1c7f34a1dd21dadb8

  • SHA256

    1a5ef68208365f3575fb08d6fba84b3a8a6564cec61db97279a8574522defe7c

  • SHA512

    5374086c6cb5171e42399077fbb37160be3f879c1d706f5fd9882272555d83aacf788d3b5e354f8c2c4b5209b42b7cedf1cc8bfa93182e257e915cd82b230746

  • SSDEEP

    196608:hDcUG4raKu24YY7HVT4hV0AD6QgqKRgX:HmKr4YYH+EUWpgX

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchostexe.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections