Extracted

• • Target

    25e6923418ede3293afad2e318e302f1249323c56cbfed23c9586a7e7c1996fb

  • Size

    148KB

  • MD5

    a6bb96f7c9972db7d27a415742d57a88

  • SHA1

    d8e3c322e66d714db5a947ea0804f112f7971734

  • SHA256

    25e6923418ede3293afad2e318e302f1249323c56cbfed23c9586a7e7c1996fb

  • SHA512

    e40fcf73f5ff1e86214d369dcd5ebc1735dba9ac5ea95a0b357fc8935061274858e9f6fd9dbf1dc9b2224424c4eebd6c79d81551ddbc78bb96371c0c903aa3ca

  Score

  10^/10

  systembctrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2