Overview

overview

10

Static

static

dwe.exe

windows7_x64

10

dwe.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dwe.exe

  • Size

    708KB

  • Sample

    210302-2zadb82j72

  • MD5

    9b5faf228e2047d8d912e406f9a6eca3

  • SHA1

    5aa586a0cd2edf8ddacaa72853a1eb80a50b975b

  • SHA256

    330690fd9d001e63f7aa537a28d326e7ffcd61d59ba140a637337ccad1cafb52

  • SHA512

    5684f2a0a9aedacd590eeb76fe8812f08722af76df70fb6698ebf06f0a3db700a3049af26ea76bbc88900c4b109e4bfc19d4c7405497269a609a7c5c2354ac92

Score
10/10
systembcdavetrojan

Malware Config

Extracted

Family

systembc

C2

78.141.210.78:443

45.141.87.60:443

Targets

    • Target

      dwe.exe

    • Size

      708KB

    • MD5

      9b5faf228e2047d8d912e406f9a6eca3

    • SHA1

      5aa586a0cd2edf8ddacaa72853a1eb80a50b975b

    • SHA256

      330690fd9d001e63f7aa537a28d326e7ffcd61d59ba140a637337ccad1cafb52

    • SHA512

      5684f2a0a9aedacd590eeb76fe8812f08722af76df70fb6698ebf06f0a3db700a3049af26ea76bbc88900c4b109e4bfc19d4c7405497269a609a7c5c2354ac92

    Score
    10/10
    systembcdavetrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Dave packer

      Detects executable using a packer named 'Dave' by the community, based on a string at the end.

      dave
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks