svchost_protected[.]exe

Resubmissions

22/05/2026, 06:13

260522-gyy2wah12v3

22/05/2026, 06:12

260522-gyd2pse19p3

Sharing

Copy URL Twitter E-mail

General

Target
svchost_protected.exe
Size 89KB
Sample260522-gyd2pse19p
SHA256 5b8ef657def5c5cb514646c73af4fcab516fadae6f014bcb2f26affb53ad0658
MD5 2fefb027f476f6474a66a77075293158
SHA1 10ac61c95455575e22c3833292206ae7a0a7aabc
SHA512 8fa629a96c84e4f7ed86066e5cc8b935c661f7a67abcffb118e25215ab9547f7c0b75a4102e9f521e5fb550b4b388661e440e48a135efb09ba10c5851aba1fe2
SSDEEP 1536:C7O7mIgg0kF/RHmqN1voQOjGQYWKWhTlkdLKKT9cm9aM9b8+x2/vVgT8RNB:C7OVgg0kFZHdfzUGQ1hTlkdLKKT9cm9
TLSH
T1869387D971A74432C87FAD32B6C2A14B7EB05177BD01E1C92CD227D22B06D5689C9CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
svchost_protected.exe

File Explorer

svchost_protected.exe

.exe 89KB

svchost_protected.exe

SHA256 5b8ef657def5c5cb514646c73af4fcab516fadae6f014bcb2f26affb53ad0658
MD5 2fefb027f476f6474a66a77075293158
SHA1 10ac61c95455575e22c3833292206ae7a0a7aabc
SHA512 8fa629a96c84e4f7ed86066e5cc8b935c661f7a67abcffb118e25215ab9547f7c0b75a4102e9f521e5fb550b4b388661e440e48a135efb09ba10c5851aba1fe2
SSDEEP 1536:C7O7mIgg0kF/RHmqN1voQOjGQYWKWhTlkdLKKT9cm9aM9b8+x2/vVgT8RNB:C7OVgg0kFZHdfzUGQ1hTlkdLKKT9cm9
TLSH
T1869387D971A74432C87FAD32B6C2A14B7EB05177BD01E1C92CD227D22B06D5689C9CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths