General
- Target svchost.exe
- Size 14.4MB
- Sample260620-acantsdt7t
- SHA256 8aa13cf799c82198fd7754c8eb3d679974133258e8482e274bfe00880938b65a
- MD5 cc5194ca55686fa0e5d6ac0565253b16
- SHA1 aba15a9f531849e46622c96693357e616147cc9a
- SHA512 4d2597c3cf22c4c9b9959b2704a0b10e53afac928a766c087652ec83646317cb58feff7f4706a7714b6619d34b8c5f0db6adb2a6c3903ab769fd59e9622add0e
- SSDEEP 393216:/1W8WHuC9hHTodRGkXE9v9JHL0RfOd71:NW8WOCX0LhXgraOV
- TLSH T11AE633A6B3C508FCF99A623559C2052177B674144770C2DB4BE88EA22E771E4FE317A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 14.4MB
- SHA256 8aa13cf799c82198fd7754c8eb3d679974133258e8482e274bfe00880938b65a
- MD5 cc5194ca55686fa0e5d6ac0565253b16
- SHA1 aba15a9f531849e46622c96693357e616147cc9a
- SHA512 4d2597c3cf22c4c9b9959b2704a0b10e53afac928a766c087652ec83646317cb58feff7f4706a7714b6619d34b8c5f0db6adb2a6c3903ab769fd59e9622add0e
- SSDEEP 393216:/1W8WHuC9hHTodRGkXE9v9JHL0RfOd71:NW8WOCX0LhXgraOV
- TLSH T11AE633A6B3C508FCF99A623559C2052177B674144770C2DB4BE88EA22E771E4FE317A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.