Resubmissions
27-12-2021 06:52
211227-hnfm8accf6 1027-10-2021 06:35
211027-hcvb8sagg8 1025-10-2021 05:54
211025-gl6wysgegl 10Analysis
-
max time kernel
118s -
max time network
135s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
25-10-2021 05:54
General
-
Target
073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c.exe
-
Size
331KB
-
MD5
bf03442f038443b9e4eff1081bb51c38
-
SHA1
c0c66486acc3c13ab842cb13a2a40ce316b7fc00
-
SHA256
073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c
-
SHA512
3eb5a6272b091e7a6a132dd09ed9d5739d67a6fc31a5289e63f4f0393288e4c44048a616c3514bddb8b0675b14c858224444d2926d38eeb1ad7a9c5d4307d733
Score
10/10
Malware Config
Extracted
Family
systembc
C2
185.173.39.49:4001
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c.exe"C:\Users\Admin\AppData\Local\Temp\073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c.exeC:\Users\Admin\AppData\Local\Temp\073bc58ee928f589d0ed4fc556df8d11477c29590c5239bbb02392fcfe88458c.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
41.7MB
-
Filesize
20KB
-
Filesize
41.7MB