General

  • Target

    lsistv.exe

  • Size

    30KB

  • Sample

    210315-yvx4fx586e

  • MD5

    9e59c1246f4cb952549c2d12f32208cd

  • SHA1

    6412f4e284a1d5fb720f4e1a9d1e08b5bf7a9e5d

  • SHA256

    195fa07b1f6fc1c8d4fab943f3b795beeb8cf44495e6e1cedfe0acbeb8a033a1

  • SHA512

    2bbdc436a10792aeda2773466c08f919864c23e1503a8964b10990bd16a45054e0ed179d07872959a1eb6552a14a8f730ac6c44f9278057e732ee08c6e3ec494

Score
10/10

Malware Config

Extracted

Family

systembc

C2

104.217.8.100:5050

Targets

    • Target

      lsistv.exe

    • Size

      30KB

    • MD5

      9e59c1246f4cb952549c2d12f32208cd

    • SHA1

      6412f4e284a1d5fb720f4e1a9d1e08b5bf7a9e5d

    • SHA256

      195fa07b1f6fc1c8d4fab943f3b795beeb8cf44495e6e1cedfe0acbeb8a033a1

    • SHA512

      2bbdc436a10792aeda2773466c08f919864c23e1503a8964b10990bd16a45054e0ed179d07872959a1eb6552a14a8f730ac6c44f9278057e732ee08c6e3ec494

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks