Analysis
-
max time kernel
65s -
max time network
151s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
04-07-2021 11:21
General
-
Target
32b16aac379f192f71c5c46b6cd8f176.exe
-
Size
627KB
-
MD5
32b16aac379f192f71c5c46b6cd8f176
-
SHA1
fa0a0e78eaffb35cd2e1d7b3749e81de551b0661
-
SHA256
84942f3b5f4ddd9f393b42d5a1968a4b5bf5bbf45de0c6a95eba61eb20dc5070
-
SHA512
6fa7194e5be6e71f9a16b7cc19cb0703113ae885044b90aca6f7c1e8a79c8fc21b405ae2f9245c4d68ecc76c531c37ea6803ce9a71b7ace8851cecb9100212fc
Score
10/10
Malware Config
Extracted
Family
systembc
C2
185.215.113.32:4000
78.47.64.46:4000
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\32b16aac379f192f71c5c46b6cd8f176.exe"C:\Users\Admin\AppData\Local\Temp\32b16aac379f192f71c5c46b6cd8f176.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\32b16aac379f192f71c5c46b6cd8f176.exeC:\Users\Admin\AppData\Local\Temp\32b16aac379f192f71c5c46b6cd8f176.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/656-114-0x00000000021C0000-0x00000000021C1000-memory.dmpFilesize
4KB
-
memory/656-115-0x00000000021F0000-0x00000000021F5000-memory.dmpFilesize
20KB
-
memory/656-116-0x0000000000400000-0x00000000004A2000-memory.dmpFilesize
648KB
-
memory/3104-117-0x00000000001E0000-0x00000000001E1000-memory.dmpFilesize
4KB
-
memory/3104-119-0x0000000000400000-0x00000000004A2000-memory.dmpFilesize
648KB