Analysis
-
max time kernel
144s -
max time network
144s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
12-11-2021 10:47
General
-
Target
e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff.exe
-
Size
159KB
-
MD5
718f3870241049ee60e9d101ba63dc4c
-
SHA1
df4361cce96b099af94f4779aed6abaec77c4d4c
-
SHA256
e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff
-
SHA512
f6c8b4398c2a8556057bc7c2ec16b4c7848da90781563f06419aa37bd5cfbabdb71f42dd97279c5f76c1e9090cfad2341ed179cf5aa3d5a93e5258387dc3cc7a
Score
10/10
Malware Config
Extracted
Family
systembc
C2
91.212.150.113:4199
192.53.123.202:4199
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff.exe"C:\Users\Admin\AppData\Local\Temp\e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff.exeC:\Users\Admin\AppData\Local\Temp\e4fab3cfa9fe290412227ad17079014e071dbd945f4a6eeffd1ba47edbfaddff.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
24KB
-
Filesize
196KB
-
Filesize
696KB
-
Filesize
696KB
-
Filesize
196KB