Analysis
-
max time kernel
110s -
max time network
147s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
11-11-2021 21:55
General
-
Target
21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653.exe
-
Size
333KB
-
MD5
6bcdff41e4594d9752d0bd04e3cc04d1
-
SHA1
0f9d751e6639727ab65d08761aee8919f7840608
-
SHA256
21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653
-
SHA512
db7d295dbd2be6a235072f6eeb3e128e5b2b141151831e6932b33a70f66f2df45b63068d5cb8a8dd86302a6bf075e7ed5fb7fc20249be6ccc5fd0a9099fbb799
Score
10/10
Malware Config
Extracted
Family
systembc
C2
91.212.150.113:4199
192.53.123.202:4199
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653.exe"C:\Users\Admin\AppData\Local\Temp\21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653.exeC:\Users\Admin\AppData\Local\Temp\21354818c43e37cedd399f04007f5249e435dccfbc0bd520a4e5c5189e3b1653.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
39.3MB
-
Filesize
64KB
-
Filesize
20KB
-
Filesize
39.3MB