Overview

overview

10

Static

static

5350c1492b...4f.exe

windows7_x64

10

5350c1492b...4f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5350c1492b2359b71a31ba103cc19b4f.exe

  • Size

    886KB

  • Sample

    210603-32q8f8c9e6

  • MD5

    5350c1492b2359b71a31ba103cc19b4f

  • SHA1

    67b81cec1269523057aac6db028b33955bffc735

  • SHA256

    e90fa8b16a3e943baf7882ce978b4903c3012be94370e99eb0560bb8e970d682

  • SHA512

    6d0c70987524b698bf7e8cb78cfa247078810938535ff569dd9691ed6d5e8fbea703bf62180e07e624fda13c732db226d3f2231c48e3c698e5338cfb5f253f80

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

88.198.147.80:4174

78.47.64.46:4174

Targets

    • Target

      5350c1492b2359b71a31ba103cc19b4f.exe

    • Size

      886KB

    • MD5

      5350c1492b2359b71a31ba103cc19b4f

    • SHA1

      67b81cec1269523057aac6db028b33955bffc735

    • SHA256

      e90fa8b16a3e943baf7882ce978b4903c3012be94370e99eb0560bb8e970d682

    • SHA512

      6d0c70987524b698bf7e8cb78cfa247078810938535ff569dd9691ed6d5e8fbea703bf62180e07e624fda13c732db226d3f2231c48e3c698e5338cfb5f253f80

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks