General

  • Target

    aaf1787a98de070ce8b558155b7f9a36e779bc21552f8ae6b39fdab275d9f7c0.dll

  • Size

    90KB

  • Sample

    210303-6hypda78js

  • MD5

    f64b4989e48381bc2aa0ffba6463db7b

  • SHA1

    48baefe376fd4181f786078e8aa1599c1ae9c899

  • SHA256

    aaf1787a98de070ce8b558155b7f9a36e779bc21552f8ae6b39fdab275d9f7c0

  • SHA512

    b45b7c0a3975896e41755515b09e39ac7179be78cefcf8111e7eca8235b03a5872375f954b75ed79794815d611daf19b2e3457c45353554ca8d9e335895a6b23

Score
10/10

Malware Config

Extracted

Family

systembc

C2

marchassl01.com:4001

marchassl012.com:4001

Targets

    • Target

      aaf1787a98de070ce8b558155b7f9a36e779bc21552f8ae6b39fdab275d9f7c0.dll

    • Size

      90KB

    • MD5

      f64b4989e48381bc2aa0ffba6463db7b

    • SHA1

      48baefe376fd4181f786078e8aa1599c1ae9c899

    • SHA256

      aaf1787a98de070ce8b558155b7f9a36e779bc21552f8ae6b39fdab275d9f7c0

    • SHA512

      b45b7c0a3975896e41755515b09e39ac7179be78cefcf8111e7eca8235b03a5872375f954b75ed79794815d611daf19b2e3457c45353554ca8d9e335895a6b23

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks