General

  • Target

    e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699

  • Size

    231KB

  • Sample

    220313-atqrdadhdj

  • MD5

    af6ec9ed07c5baa331323c30f874070a

  • SHA1

    557507d8fe64a451c56c1daa4973944b3c4470fc

  • SHA256

    e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699

  • SHA512

    d22727886e4532edb35aaaddd7de88d858028d9b4a0d13423934759c23f4a984e269e746a069682d23ed9f5cae575193df2c619465b699fd775152053c52defe

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699

    • Size

      231KB

    • MD5

      af6ec9ed07c5baa331323c30f874070a

    • SHA1

      557507d8fe64a451c56c1daa4973944b3c4470fc

    • SHA256

      e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699

    • SHA512

      d22727886e4532edb35aaaddd7de88d858028d9b4a0d13423934759c23f4a984e269e746a069682d23ed9f5cae575193df2c619465b699fd775152053c52defe

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    • suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata: ET MALWARE Win32/SystemBC CnC Checkin

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks