Overview

overview

10

Static

static

8

eeb7015787...ed.exe

windows7_x64

10

eeb7015787...ed.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eeb70157878895f60fe11a8cb0f37907549cd44857592d7ee0a769a9eef9dced

  • Size

    234KB

  • Sample

    220320-a5d7qaddb9

  • MD5

    226ee1dec8ea871161b64020b2ee8663

  • SHA1

    0866413ef90e37186ff269d1270e57c2b50f6b2f

  • SHA256

    eeb70157878895f60fe11a8cb0f37907549cd44857592d7ee0a769a9eef9dced

  • SHA512

    c5d8eff81783afae5f6de0e8aeb0586ca7af086ee99c6fcff87867730cb36f6a4c067bc82a2c32e6a10fff1d24c93a57931270d2df4c33d317965499cb7f651d

Score
10/10
systembctrojanupx

Malware Config

Extracted

Family

systembc

C2

dec15coma.com:4039

dec15coma.xyz:4039

Targets

    • Target

      eeb70157878895f60fe11a8cb0f37907549cd44857592d7ee0a769a9eef9dced

    • Size

      234KB

    • MD5

      226ee1dec8ea871161b64020b2ee8663

    • SHA1

      0866413ef90e37186ff269d1270e57c2b50f6b2f

    • SHA256

      eeb70157878895f60fe11a8cb0f37907549cd44857592d7ee0a769a9eef9dced

    • SHA512

      c5d8eff81783afae5f6de0e8aeb0586ca7af086ee99c6fcff87867730cb36f6a4c067bc82a2c32e6a10fff1d24c93a57931270d2df4c33d317965499cb7f651d

    Score
    10/10
    systembctrojanupx

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks