General
- Target svchost.exe
- Size 549KB
- Sample260710-ttj4dafs3s
- SHA256 d25a3784fce60c07e69c9d86ea2b55ff83e4a48257549fba5d35d330b38e68c6
- MD5 37b50dcb8175e39fc137c9246c42e916
- SHA1 0b42185c10b268b6540d8c25360300fa279bb6ef
- SHA512 40827f8812388c5a843b4668425b15e512bb6ee9090c76f6c25edf8fb35c3be1dd03c39ebf267780b1b64f18f516b392b3071401073fbfaa39bde686dccc75e5
- SSDEEP 12288:CfEXERJ54NU+7gW+usgqPS88/sT2Zam01+REo6cnRSW:CfCEb6NUe+us43/ngm0YRECR
- TLSH T105C4120C774E8515CB3F0AFBE062141087F8FB576903CB5E6AD8D09A16C371A5EA2B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 549KB
- SHA256 d25a3784fce60c07e69c9d86ea2b55ff83e4a48257549fba5d35d330b38e68c6
- MD5 37b50dcb8175e39fc137c9246c42e916
- SHA1 0b42185c10b268b6540d8c25360300fa279bb6ef
- SHA512 40827f8812388c5a843b4668425b15e512bb6ee9090c76f6c25edf8fb35c3be1dd03c39ebf267780b1b64f18f516b392b3071401073fbfaa39bde686dccc75e5
- SSDEEP 12288:CfEXERJ54NU+7gW+usgqPS88/sT2Zam01+REo6cnRSW:CfCEb6NUe+us43/ngm0YRECR
- TLSH T105C4120C774E8515CB3F0AFBE062141087F8FB576903CB5E6AD8D09A16C371A5EA2B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.