General

  • Target

    ba52ca97ab871363374b04bb6330e4bf7591fcd22b9e0db4a7deafec8f1421bf

  • Size

    232KB

  • Sample

    220313-1ckf5sacg6

  • MD5

    874639d9c6051cb16a8d3de676d9fbe9

  • SHA1

    479076ff8d4f5d188282c38bef533c244f79715d

  • SHA256

    ba52ca97ab871363374b04bb6330e4bf7591fcd22b9e0db4a7deafec8f1421bf

  • SHA512

    7db9256c707a3a6c92694c0afdee74c30044d5942203b402d3b28bb2dff3fc2f6d8b6df8ec94a2329695f633053fae90cb28bcf21432b0e6c547f5fac16706a3

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      ba52ca97ab871363374b04bb6330e4bf7591fcd22b9e0db4a7deafec8f1421bf

    • Size

      232KB

    • MD5

      874639d9c6051cb16a8d3de676d9fbe9

    • SHA1

      479076ff8d4f5d188282c38bef533c244f79715d

    • SHA256

      ba52ca97ab871363374b04bb6330e4bf7591fcd22b9e0db4a7deafec8f1421bf

    • SHA512

      7db9256c707a3a6c92694c0afdee74c30044d5942203b402d3b28bb2dff3fc2f6d8b6df8ec94a2329695f633053fae90cb28bcf21432b0e6c547f5fac16706a3

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks