Extracted

• • Target

    579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

  • Size

    224KB

  • MD5

    38dee7a6c89ad17fe74b9c38bc58d9a8

  • SHA1

    f80b592e4bc3bf5a6224ceb3589a18d2d1ddbb27

  • SHA256

    579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

  • SHA512

    ed939761ddcc794cac9d6b8a949fa6d4515544abbb4e41d352eef5791aeb0e9449caf7a26238d2ee738ee416aab4b6fb78d04dd36656b51134ccd67b62f3d815

  Score

  10^/10

  systembcsuricatatrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

    suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

    suricata

  • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata

  • suricata: ET MALWARE Win32/SystemBC CnC Checkin

    suricata: ET MALWARE Win32/SystemBC CnC Checkin

    suricata

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1