Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c65adeedf632ba99f4fc5631a883a2d199faf4e505c0a1e06c169ca6bd33365

  • Size

    233KB

  • Sample

    220312-yq81jsaea2

  • MD5

    f1aaf391cd3187ac41ade80b7520843e

  • SHA1

    d0b9b290fed1a09aafc04c4b1b657d8ebd03ed7b

  • SHA256

    6c65adeedf632ba99f4fc5631a883a2d199faf4e505c0a1e06c169ca6bd33365

  • SHA512

    0faee51c84467a90137be7a6503662cfb50b403711fe6a7cf69d47d856f9cf5f3b4d9efb7084b3242490c986744edfc3a0382df87dbf07312e20a6b7736c27bf

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      6c65adeedf632ba99f4fc5631a883a2d199faf4e505c0a1e06c169ca6bd33365

    • Size

      233KB

    • MD5

      f1aaf391cd3187ac41ade80b7520843e

    • SHA1

      d0b9b290fed1a09aafc04c4b1b657d8ebd03ed7b

    • SHA256

      6c65adeedf632ba99f4fc5631a883a2d199faf4e505c0a1e06c169ca6bd33365

    • SHA512

      0faee51c84467a90137be7a6503662cfb50b403711fe6a7cf69d47d856f9cf5f3b4d9efb7084b3242490c986744edfc3a0382df87dbf07312e20a6b7736c27bf

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix

Tasks