Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svchost.bin

  • Size

    55KB

  • MD5

    ec3f6c635a79aae4ad8e8e3c1a69b074

  • SHA1

    7e486b2c8255442961db17a9aa8f045cf267117e

  • SHA256

    c926c37c94e516476f12d6c46f73b6b74296f1ab273b8a032f287382cdd5d855

  • SHA512

    4dd0356116068390ca4b98b2b82a1123094bfcd23d6282e4aee47a658313ab0bffc9ae947541e3faab367d53c6153e08d526be02280536bad0a0b58b1fbfae46

  • SSDEEP

    1536:3jCQTodrukUoaAkw0w0AggEQMay2sAUamwEqa+06fYzZUdmlPdcl8bGY3:nT40F0SBqq

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.bin
    .exe windows:5 windows x86 arch:x86

    2febb545b22fc82c1d531de3fa84859f


    Headers

    Imports

    Sections