Overview

overview

8

Static

static

7

svchost.exe

windows10-1703-x64

8

svchost.exe

windows10-2004-x64

8

svchost.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    300KB

  • MD5

    983c573f18784e50a54765ad153c2f41

  • SHA1

    52d49037206da9466484a5b88ff3bf9e013cbdb0

  • SHA256

    2eca26a353c1e1d711e8eff86dd1ff31a9e30d941c7b462444f6f04e46b56895

  • SHA512

    8650173192a34eb67da3f5f436ad063f05e61446de751aa41ab64c58f701275db5772e062aad0d378de8789380850e478e3ee9a5a2607e49af2106db03ff91d5

  • SSDEEP

    6144:up0tcnrEZT9cga5mBstif/9a1lD8K5KcRbB:8vgUsM1lQKIcR

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections