Overview

overview

10

Static

static

dridex

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79edc7bfd3e3b2c209ccbd32b32653d7b3613d9b586190e64ac44e05e745676f

  • Size

    223KB

  • Sample

    220326-rdht9sdef7

  • MD5

    a0e7217dd5f2bc9173909d48dae3fbab

  • SHA1

    5a7465ca0541374f63cf1a8587ec44184b6109b7

  • SHA256

    79edc7bfd3e3b2c209ccbd32b32653d7b3613d9b586190e64ac44e05e745676f

  • SHA512

    a756ed124f5a4354c2dabec14222d27fa0583b2c4bad305ad350713e207db351d12592cced859d1376fceea5f4342ff863210d8d90e94d18660fe6c7aebd3d41

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      79edc7bfd3e3b2c209ccbd32b32653d7b3613d9b586190e64ac44e05e745676f

    • Size

      223KB

    • MD5

      a0e7217dd5f2bc9173909d48dae3fbab

    • SHA1

      5a7465ca0541374f63cf1a8587ec44184b6109b7

    • SHA256

      79edc7bfd3e3b2c209ccbd32b32653d7b3613d9b586190e64ac44e05e745676f

    • SHA512

      a756ed124f5a4354c2dabec14222d27fa0583b2c4bad305ad350713e207db351d12592cced859d1376fceea5f4342ff863210d8d90e94d18660fe6c7aebd3d41

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix

Tasks