Overview

overview

10

Static

static

32e51accf5...06.exe

windows7_x64

10

32e51accf5...06.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06

  • Size

    423KB

  • Sample

    220220-kk55tabfhm

  • MD5

    ab52b38a4f5393e5bf919b75c0abdbdf

  • SHA1

    1fe162d6461405f7bd2c8def91e547cf85b28638

  • SHA256

    32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06

  • SHA512

    c7cbf5bbba6c6b4e5069ea0f5b6343e771cfd86f6a1295d7b9b653465f3068ac0a5c9492a89f38ac81db92879642dbab8943507a72438223690bacb291d8cdbc

Score
10/10
systembcdavetrojan

Malware Config

Extracted

Family

systembc

C2

88.119.174.113:443

Targets

    • Target

      32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06

    • Size

      423KB

    • MD5

      ab52b38a4f5393e5bf919b75c0abdbdf

    • SHA1

      1fe162d6461405f7bd2c8def91e547cf85b28638

    • SHA256

      32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06

    • SHA512

      c7cbf5bbba6c6b4e5069ea0f5b6343e771cfd86f6a1295d7b9b653465f3068ac0a5c9492a89f38ac81db92879642dbab8943507a72438223690bacb291d8cdbc

    Score
    10/10
    systembcdavetrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Dave packer

      Detects executable using a packer named 'Dave' by the community, based on a string at the end.

      dave

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks