Overview

overview

10

Static

static

f29484e8e6...99.exe

windows7_x64

10

f29484e8e6...99.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f29484e8e60d1104bb60a504279909f7d4c5a68d77d794dcaed4758d95989a99

  • Size

    108KB

  • Sample

    220201-kqz6racce2

  • MD5

    548bee2bd83ff511d62db68fcfc554d7

  • SHA1

    03186cad78ac23cf144ccdf5d28690f53f96eb91

  • SHA256

    f29484e8e60d1104bb60a504279909f7d4c5a68d77d794dcaed4758d95989a99

  • SHA512

    474b9ee971d8fb5b7c43e003220dff88fafe1f5684d34c9d4948d6a3c2b619cec9bf1a6c6f4ca69b446af7a28a14265d4443f2ba74c6b3756c7915d3ea9f3568

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

139.60.161.58:4125

192.155.111.215:4125

Targets

    • Target

      f29484e8e60d1104bb60a504279909f7d4c5a68d77d794dcaed4758d95989a99

    • Size

      108KB

    • MD5

      548bee2bd83ff511d62db68fcfc554d7

    • SHA1

      03186cad78ac23cf144ccdf5d28690f53f96eb91

    • SHA256

      f29484e8e60d1104bb60a504279909f7d4c5a68d77d794dcaed4758d95989a99

    • SHA512

      474b9ee971d8fb5b7c43e003220dff88fafe1f5684d34c9d4948d6a3c2b619cec9bf1a6c6f4ca69b446af7a28a14265d4443f2ba74c6b3756c7915d3ea9f3568

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks