Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

  • Size

    224KB

  • Sample

    220326-nnjyjagffk

  • MD5

    38dee7a6c89ad17fe74b9c38bc58d9a8

  • SHA1

    f80b592e4bc3bf5a6224ceb3589a18d2d1ddbb27

  • SHA256

    579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

  • SHA512

    ed939761ddcc794cac9d6b8a949fa6d4515544abbb4e41d352eef5791aeb0e9449caf7a26238d2ee738ee416aab4b6fb78d04dd36656b51134ccd67b62f3d815

Score
10/10
systembcsuricatatrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

    • Size

      224KB

    • MD5

      38dee7a6c89ad17fe74b9c38bc58d9a8

    • SHA1

      f80b592e4bc3bf5a6224ceb3589a18d2d1ddbb27

    • SHA256

      579fdf145dec44a51211741a223271c8569de00a212f774afda5c4773273efcd

    • SHA512

      ed939761ddcc794cac9d6b8a949fa6d4515544abbb4e41d352eef5791aeb0e9449caf7a26238d2ee738ee416aab4b6fb78d04dd36656b51134ccd67b62f3d815

    Score
    10/10
    systembcsuricatatrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata

    • suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks