General
- Target svchost.exe
- Size 7.6MB
- Sample261023-c4sd3awshw
- SHA256 9168d3c1cbfd4f85fe159cc77f74c8584e501a34b95d09210c7749a9ee27f644
- MD5 caaa3d5e6bca3173982b1b037fe752d2
- SHA1 fb50a0266180a594bc5f1032c8628cf966652a17
- SHA512 a4c6add843b7b94c0218c3b2818849491e1c0d60dc049640e296fa1c3be891d7aa266d49deb3b025d9da48301642ee337039d552505251c6ab506fc3065deaa1
- SSDEEP 98304:LAf8ucWMrlTwFF+0GRFf8lboYROGIXLS:LLucWUwF5vlFIXm
- TLSH T10C86AD15A3E900A5E42BDB38CA65C733DAB17C925735C20F0A99F65A1F33A508B3F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 7.6MB
- SHA256 9168d3c1cbfd4f85fe159cc77f74c8584e501a34b95d09210c7749a9ee27f644
- MD5 caaa3d5e6bca3173982b1b037fe752d2
- SHA1 fb50a0266180a594bc5f1032c8628cf966652a17
- SHA512 a4c6add843b7b94c0218c3b2818849491e1c0d60dc049640e296fa1c3be891d7aa266d49deb3b025d9da48301642ee337039d552505251c6ab506fc3065deaa1
- SSDEEP 98304:LAf8ucWMrlTwFF+0GRFf8lboYROGIXLS:LLucWUwF5vlFIXm
- TLSH T10C86AD15A3E900A5E42BDB38CA65C733DAB17C925735C20F0A99F65A1F33A508B3F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.