Overview

overview

3

Static

static

3

svc.exe

windows11-ltsc_2024-x64

1

Resubmissions

23/08/2026, 01:07

260823-bgm1dswvdt3

23/08/2026, 01:06

260823-bf4lrawvds3

Analysis

  • user interaction
    yes
  • max time kernel
    34s
  • max time network
    31s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/08/2026, 01:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    svc.exe
  • Size 193KB
  • Sample260823-bf4lrawvds
  • SHA256 b1b2f468c953b7bda2d03bfaaed60ba576eedeb5d3e6198d4185e3c7b268f839
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\svc.exe
    "C:\Users\Admin\AppData\Local\Temp\svc.exe"
    1⤵
      PID:2680
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2400
      • C:\Windows\System32\DataExchangeHost.exe
        C:\Windows\System32\DataExchangeHost.exe -Embedding
        1⤵
          PID:1636
        • C:\Users\Admin\Desktop\svc.exe
          "C:\Users\Admin\Desktop\svc.exe"
          1⤵
            PID:2592
          • C:\Users\Admin\Desktop\svc.exe
            "C:\Users\Admin\Desktop\svc.exe"
            1⤵
              PID:5768
            • C:\Users\Admin\Desktop\svc.exe
              "C:\Users\Admin\Desktop\svc.exe"
              1⤵
                PID:5912
              • C:\Users\Admin\Desktop\svc.exe
                "C:\Users\Admin\Desktop\svc.exe"
                1⤵
                  PID:1688
                • C:\Users\Admin\Desktop\svc.exe
                  "C:\Users\Admin\Desktop\svc.exe"
                  1⤵
                    PID:6124
                  • C:\Users\Admin\Desktop\svc.exe
                    "C:\Users\Admin\Desktop\svc.exe"
                    1⤵
                      PID:2492
                    • C:\Users\Admin\Desktop\svc.exe
                      "C:\Users\Admin\Desktop\svc.exe"
                      1⤵
                        PID:5460
                      • C:\Users\Admin\Desktop\svc.exe
                        "C:\Users\Admin\Desktop\svc.exe"
                        1⤵
                          PID:1936

                        Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              wct62A3.tmp
                              • Path C:\Users\Admin\AppData\Local\Temp\wct62A3.tmp
                              • Size 63KB
                              • SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download