Extracted

• • Target

    ea9e177660eb79d3791f96304613657d605c7007310a27c83cd24742f1667e0f

  • Size

    87KB

  • MD5

    d623e16fd5b0cccb2ee19ce6fe0aef3e

  • SHA1

    3a0645d9cae8f841fabaf3daf256527f479cf753

  • SHA256

    ea9e177660eb79d3791f96304613657d605c7007310a27c83cd24742f1667e0f

  • SHA512

    82461d1badf9f44286260891bab8dd34ad912ca256531046c685e04717810bca6fddda41f084b03ac4bccbb0fbc8214feda66f625022f9ed1bd4a9587a19af39

  Score

  10^/10

  systembctrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2