Overview

overview

10

Static

static

23e0db71f3...31.exe

windows7_x64

10

23e0db71f3...31.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23e0db71f3d2182bb78ed5aaed6dbe31.exe

  • Size

    149KB

  • Sample

    211123-j3ak7ahedj

  • MD5

    23e0db71f3d2182bb78ed5aaed6dbe31

  • SHA1

    bdd3f63038f0c5cb80812289694da6e1d81b74ed

  • SHA256

    1f65b5b41f6821ecb05aa14f391939ad2d527c7b1b48c377a5a4647051c5ae84

  • SHA512

    03964f4dae03248bf3458d15334046632fc7ccc843f23f2b628a0e52aa162a347dfc5d7dd8307e98fa4e1cd17e9aa597513286859a6fbc2f9a124f9b54723ff3

Score
10/10
systembcsuricatatrojan

Malware Config

Extracted

Family

systembc

C2

45.156.26.59:4179

217.182.46.152:4179

Targets

    • Target

      23e0db71f3d2182bb78ed5aaed6dbe31.exe

    • Size

      149KB

    • MD5

      23e0db71f3d2182bb78ed5aaed6dbe31

    • SHA1

      bdd3f63038f0c5cb80812289694da6e1d81b74ed

    • SHA256

      1f65b5b41f6821ecb05aa14f391939ad2d527c7b1b48c377a5a4647051c5ae84

    • SHA512

      03964f4dae03248bf3458d15334046632fc7ccc843f23f2b628a0e52aa162a347dfc5d7dd8307e98fa4e1cd17e9aa597513286859a6fbc2f9a124f9b54723ff3

    Score
    10/10
    systembcsuricatatrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks