systembc | f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986 | Triage

Analysis

max time kernel
124s
max time network
153s
platform
windows10_x64
resource
win10-en-20211104
submitted
11-11-2021 19:01

Sharing

Report Analysis Logs

General

Target

f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe
Size

333KB
MD5

936e160f17e9b5e671e9529edb0074c4
SHA1

e124f02a35924fdc2b20f3b084eabf77fc6cadff
SHA256

f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986
SHA512

583a464f8c3d0fff0d4098f0fd0dba5dbc53ec71f028e88d9f18f0db785b140b7d8dad4ac7899df29cc6076a950f0ad2818b6d842b250583cf0cabb8926109ce

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

91.212.150.113:4199

192.53.123.202:4199

Signatures

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc

Drops file in Windows directory 2 IoCs

Processes:

f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe

description	ioc	process
File opened for modification	C:\Windows\Tasks\wow64.job	f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe
File created	C:\Windows\Tasks\wow64.job	f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe

C:\Users\Admin\AppData\Local\Temp\f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe
"C:\Users\Admin\AppData\Local\Temp\f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe"
1⤵
- Drops file in Windows directory
PID:4132

C:\Users\Admin\AppData\Local\Temp\f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe
C:\Users\Admin\AppData\Local\Temp\f4c6beef21a4078b1844a91802541f10763400576e687ce9c55b5ee57a7ee986.exe start
1⤵
PID:4192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4132-119-0x0000000002BA0000-0x0000000002BA5000-memory.dmp

Filesize
20KB

Download
memory/4132-120-0x0000000000400000-0x0000000002B4B000-memory.dmp

Filesize
39.3MB

Download
memory/4192-122-0x0000000000400000-0x0000000002B4B000-memory.dmp

Filesize
39.3MB

Download