General
- Target svchost.exe
- Size 24.0MB
- Sample261030-pg2ensee95
- SHA256 76fec5d34c8e5716a1ad065faae8901131baa9d2cc4417d12bfe5279624f88d4
- MD5 06c3bde6e82d8d5eecbc9d2fcce0265e
- SHA1 384f1e8bc8d81ced464437021995248bb771fb2a
- SHA512 d62a012446388065274fa661f0292a539ae3b3466941bcd2b9c9c07b8f09ba7f2e1b9f4e812db776ad70e565eb03bff019f208569420c6433038851e30dd1d3f
- SSDEEP 786432:T4Jl4OtErUnLLsKMMo5ovsVuR8Pd3UqbwjAk:T4XtEdoeOGdkqbwjAk
- TLSH T1634733447BBCC46FE26684749871E73088A27C320769C45BABFD6D5339573E8BE39A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win10v2004-20260911-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win11ltsc2024-20260911-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 24.0MB
- SHA256 76fec5d34c8e5716a1ad065faae8901131baa9d2cc4417d12bfe5279624f88d4
- MD5 06c3bde6e82d8d5eecbc9d2fcce0265e
- SHA1 384f1e8bc8d81ced464437021995248bb771fb2a
- SHA512 d62a012446388065274fa661f0292a539ae3b3466941bcd2b9c9c07b8f09ba7f2e1b9f4e812db776ad70e565eb03bff019f208569420c6433038851e30dd1d3f
- SSDEEP 786432:T4Jl4OtErUnLLsKMMo5ovsVuR8Pd3UqbwjAk:T4XtEdoeOGdkqbwjAk
- TLSH T1634733447BBCC46FE26684749871E73088A27C320769C45BABFD6D5339573E8BE39A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Loads dropped DLL