Overview

overview

10

Static

static

a7cbdc6914...f8.exe

windows7_x64

10

a7cbdc6914...f8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7cbdc69144242409bce8285135b61f8.exe

  • Size

    223KB

  • Sample

    220326-tdzh5aeeh2

  • MD5

    a7cbdc69144242409bce8285135b61f8

  • SHA1

    73594de56be8beaf92392af56c8bcc2fa44a6eac

  • SHA256

    f891e10c9a7b6d0cbbbb6b3d103cf3dc935541430c5363648e6e1a3203bdd76d

  • SHA512

    8f80815e16cdf899946bef69f7068cd8f8c1877e803bffc31a09195e18720a6149205f0dde7428894a81d09c41969d3e7e58d41b670354ec8095ea8e05c86bf3

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      a7cbdc69144242409bce8285135b61f8.exe

    • Size

      223KB

    • MD5

      a7cbdc69144242409bce8285135b61f8

    • SHA1

      73594de56be8beaf92392af56c8bcc2fa44a6eac

    • SHA256

      f891e10c9a7b6d0cbbbb6b3d103cf3dc935541430c5363648e6e1a3203bdd76d

    • SHA512

      8f80815e16cdf899946bef69f7068cd8f8c1877e803bffc31a09195e18720a6149205f0dde7428894a81d09c41969d3e7e58d41b670354ec8095ea8e05c86bf3

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks