Overview

overview

10

Static

static

73aa2035ea...25.exe

windows7_x64

10

73aa2035ea...25.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73aa2035ead90068d5a7ef4b1ebe0625.exe

  • Size

    139KB

  • Sample

    210306-rn1mxalk6n

  • MD5

    73aa2035ead90068d5a7ef4b1ebe0625

  • SHA1

    ecb5a651c0c7cb689bdbfeb1d5bc5300d3af235f

  • SHA256

    a601e754a8af2b3a971c1d124ac92a20631e3d393fba18e66751b5d0bff2b100

  • SHA512

    6d8d38c112ed58d31e33d75e9e9c2e7cf0d3c391e360b40565168f0b535ff157e99a9e378de87b2b970ddcb7accf4f5c7cb231bcd7b7c10b4824519db296b5b3

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

176.111.174.63:1500

192.168.1.149:1500

Targets

    • Target

      73aa2035ead90068d5a7ef4b1ebe0625.exe

    • Size

      139KB

    • MD5

      73aa2035ead90068d5a7ef4b1ebe0625

    • SHA1

      ecb5a651c0c7cb689bdbfeb1d5bc5300d3af235f

    • SHA256

      a601e754a8af2b3a971c1d124ac92a20631e3d393fba18e66751b5d0bff2b100

    • SHA512

      6d8d38c112ed58d31e33d75e9e9c2e7cf0d3c391e360b40565168f0b535ff157e99a9e378de87b2b970ddcb7accf4f5c7cb231bcd7b7c10b4824519db296b5b3

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks