systembc | c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499

Analysis

Target

c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe
Size

259KB
MD5

1f4928730be377f7affb80c3f5305883
SHA1

50b760064a237f123f0f06a846b78cf58713cad1
SHA256

c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499
SHA512

58ecec71935ab0c490d1011da04aba3d694443b67c576421e6a9e4dc615a5f43b6ee84e2d9a3a48c2895fe28b94955604c2080de290b13ecc086127e5f4dfa54

Score

10^/10

systembc trojan

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc
Executes dropped EXE 1 IoCs

Processes:

hujcpq.exe

pid process

2784 hujcpq.exe

pid	process
2784	hujcpq.exe

Drops file in Windows directory 2 IoCs

Processes:

c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe

description	ioc	process
File created	C:\Windows\Tasks\hujcpq.job	c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe
File opened for modification	C:\Windows\Tasks\hujcpq.job	c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe

C:\Users\Admin\AppData\Local\Temp\c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe
"C:\Users\Admin\AppData\Local\Temp\c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499.exe"
1⤵
- Drops file in Windows directory
PID:3992

C:\ProgramData\idlscj\hujcpq.exe
C:\ProgramData\idlscj\hujcpq.exe start
1⤵
- Executes dropped EXE
PID:2784

C:\ProgramData\idlscj\hujcpq.exe
MD5
1f4928730be377f7affb80c3f5305883

SHA1
50b760064a237f123f0f06a846b78cf58713cad1

SHA256
c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499

SHA512
58ecec71935ab0c490d1011da04aba3d694443b67c576421e6a9e4dc615a5f43b6ee84e2d9a3a48c2895fe28b94955604c2080de290b13ecc086127e5f4dfa54

Download Submit
C:\ProgramData\idlscj\hujcpq.exe
MD5
1f4928730be377f7affb80c3f5305883

SHA1
50b760064a237f123f0f06a846b78cf58713cad1

SHA256
c1d31fa7484170247564e89c97cc325d1f317fb8c8efe50e4d126c7881adf499

SHA512
58ecec71935ab0c490d1011da04aba3d694443b67c576421e6a9e4dc615a5f43b6ee84e2d9a3a48c2895fe28b94955604c2080de290b13ecc086127e5f4dfa54

Download Submit