General
- Target svchost.exe
- Size 135KB
- Sample260810-fmqexsbm3v
- SHA256 b406be46807f6d429878ebacc3b7fd3bc93881bef33866812b623c969fa564a0
- MD5 89e43999857a04dca6616646938d1d90
- SHA1 3fc1fdc4bfbf4c91e51a56fc6db3d49648b332a9
- SHA512 0db5c2665219ee2a049b1549c489605d5b5f6d2bd01e5914f5cf5057fb675c15c0f165a9562846775bb8f787c777098adec2d0a27d5ee572fd89e0e9b7ee148c
- SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVvJi:UVqoCl/YgjxEufVU0TbTyDDal9Ji
- TLSH T191D31B137E10542EE927CCF12CE2EB1ABA264F2A5B95AD477156FB243671103B9F021F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win11-20260513-en
15 signatures
60 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 135KB
- SHA256 b406be46807f6d429878ebacc3b7fd3bc93881bef33866812b623c969fa564a0
- MD5 89e43999857a04dca6616646938d1d90
- SHA1 3fc1fdc4bfbf4c91e51a56fc6db3d49648b332a9
- SHA512 0db5c2665219ee2a049b1549c489605d5b5f6d2bd01e5914f5cf5057fb675c15c0f165a9562846775bb8f787c777098adec2d0a27d5ee572fd89e0e9b7ee148c
- SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVvJi:UVqoCl/YgjxEufVU0TbTyDDal9Ji
- TLSH T191D31B137E10542EE927CCF12CE2EB1ABA264F2A5B95AD477156FB243671103B9F021F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2