General

  • Target

    svhost.exe

  • Size

    22KB

  • MD5

    54bcbd6d45bc3bc155576d759f1a6ae6

  • SHA1

    c9fcbd1ac3c48f41f17920d63dd03fef6adeba27

  • SHA256

    eab0b70f3de7f7d5be417a5e03d293e652d403f363b39d30f73c53f2672af434

  • SHA512

    b93de78e72cc012b9bd719b767e8d4dc0ee4dec81ecd102d984b6f80470da38da1c911e2c169e1d4b7a7ad9e0e96487aff71f24239196c52480217c4c9fb761d

  • SSDEEP

    384:k3Mg/bqo2OhGv+2jAp6AnXNdd10JFr91CT7d5eH:aqo2Nv4p/ndlcFr9QHeH

Score
10/10

Malware Config

Signatures

  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svhost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections