General
- Target svchost_fud.exe
- Size 90KB
- Sample260819-264ybabl8z
- SHA256 630330efa20960ab76340280654b3ea2ddb0e4b3c6726a77c3ba3cbb811efdae
- MD5 8c4e9049173bb5c28dbb5130f1039569
- SHA1 b1abe3402526c526c6c547dcbde9c925e88fc20e
- SHA512 73a94557d9aac796dcde25cfb531d4130891756fb6b4cc6025da6fbf8d1bd541570fdd78f75c60d40594ca55dea4073856b71e8881abc8f2922c8c4367ffdb1c
- SSDEEP 1536:UYizRw0AMYk+RtckWcrsoKTNgCgA7kqj6hxOGJ+gZeCpVeALPX:UYii0AMYk+X1rkTeC97ShvJ+gkqVe4PX
- TLSH T15993F10EE20304FED51AD83086E3ABB6E678BC02546667BB5350C7362F74EF156B2B45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svchost_fud.exe
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
svchost_fud.exe
Resource
win11ltsc2024-20260710-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target svchost_fud.exe
- Size 90KB
- SHA256 630330efa20960ab76340280654b3ea2ddb0e4b3c6726a77c3ba3cbb811efdae
- MD5 8c4e9049173bb5c28dbb5130f1039569
- SHA1 b1abe3402526c526c6c547dcbde9c925e88fc20e
- SHA512 73a94557d9aac796dcde25cfb531d4130891756fb6b4cc6025da6fbf8d1bd541570fdd78f75c60d40594ca55dea4073856b71e8881abc8f2922c8c4367ffdb1c
- SSDEEP 1536:UYizRw0AMYk+RtckWcrsoKTNgCgA7kqj6hxOGJ+gZeCpVeALPX:UYii0AMYk+X1rkTeC97ShvJ+gkqVe4PX
- TLSH T15993F10EE20304FED51AD83086E3ABB6E678BC02546667BB5350C7362F74EF156B2B45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.