General

  • Target

    b6be49e632cae9dc45642743c5777a99e6949ba7617cd630b040821a86133281

  • Size

    233KB

  • Sample

    220313-tzze9aabgn

  • MD5

    6f6604ee86de5fc9d0100988aaa497eb

  • SHA1

    5cff464c38375f5abc66d4fa31cd1e2d0dcac8cb

  • SHA256

    b6be49e632cae9dc45642743c5777a99e6949ba7617cd630b040821a86133281

  • SHA512

    b33a0b4435e9c6714011fac7e30625bad99f3b267f59a5fa67678c455a6e069cab7c38b33b263f2b496af263e238c8dd69f55a8357898ffdca7dcd620d4c9368

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      b6be49e632cae9dc45642743c5777a99e6949ba7617cd630b040821a86133281

    • Size

      233KB

    • MD5

      6f6604ee86de5fc9d0100988aaa497eb

    • SHA1

      5cff464c38375f5abc66d4fa31cd1e2d0dcac8cb

    • SHA256

      b6be49e632cae9dc45642743c5777a99e6949ba7617cd630b040821a86133281

    • SHA512

      b33a0b4435e9c6714011fac7e30625bad99f3b267f59a5fa67678c455a6e069cab7c38b33b263f2b496af263e238c8dd69f55a8357898ffdca7dcd620d4c9368

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata: ET MALWARE Win32/SystemBC CnC Checkin

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks