Extracted

• • Target

    9b4820342b301b20cac729a24a9c3215b968221b5a47c0640a455f6cde72a968

  • Size

    263KB

  • MD5

    a01b0bc4b44afddf64029a86f41784dd

  • SHA1

    ac559d7084e3fb42766dd71a413143ec6c29a56c

  • SHA256

    9b4820342b301b20cac729a24a9c3215b968221b5a47c0640a455f6cde72a968

  • SHA512

    bb543579cef5003eda5c9a9a7715cc5bcda25ea2491155bfd942317c77573b7736f749e84bf51b04f0fb0328a2db875f893d85604aeebb67bf03f8d4e61848d7

  Score

  10^/10

  systembcpersistencetrojan

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Sets service image path in registry

    persistence
  behavioral1