General
- Target svchost.exe
- Size 135KB
- Sample260628-bv4v3aex9w
- SHA256 3dee035170528752e86dd2bf56ef1a6aced920559946f955a4594176f211a605
- MD5 dddf5ed2a5431b02ac3576c27ebeab9a
- SHA1 b0d174a14f5e5bd7f6e36d239d7dd2bd9737ee5c
- SHA512 62b881f16f4a094244d4cdec5bb8b05165918c4bd76bb52e84a2e1c42e921e7d7f257fbc9f7a40c34746d2f26451b764fbef0756a27c901f14865f9e7b29e2e5
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalsQffffffffffffffffffffffffffffffffffffZ:UsLqdufVUNDap
- TLSH T1C7D32B27AF20551AD421C8F1A4BAE57CBE144E350BE1FD1B77A6BB0126F1A4376F120B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 135KB
- SHA256 3dee035170528752e86dd2bf56ef1a6aced920559946f955a4594176f211a605
- MD5 dddf5ed2a5431b02ac3576c27ebeab9a
- SHA1 b0d174a14f5e5bd7f6e36d239d7dd2bd9737ee5c
- SHA512 62b881f16f4a094244d4cdec5bb8b05165918c4bd76bb52e84a2e1c42e921e7d7f257fbc9f7a40c34746d2f26451b764fbef0756a27c901f14865f9e7b29e2e5
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalsQffffffffffffffffffffffffffffffffffffZ:UsLqdufVUNDap
- TLSH T1C7D32B27AF20551AD421C8F1A4BAE57CBE144E350BE1FD1B77A6BB0126F1A4376F120B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory