General

  • Target

    dd66596565f3e21ea6a94a8b54a5c14ba82f55c80e129444831ba2fca75fd5cb

  • Size

    271KB

  • Sample

    220327-kp3v9affc5

  • MD5

    5d4833eb214c52f6b08a50ce6c4f17dd

  • SHA1

    c7da5144c19e720cf74138e76ff4a011cfd7fa55

  • SHA256

    dd66596565f3e21ea6a94a8b54a5c14ba82f55c80e129444831ba2fca75fd5cb

  • SHA512

    cbc89227024d622f26b0a6ee1213c8a8b9e02bc5fad558c6a3b5afd5651bf6788a2590d98e31a930f4623dfea575d10b8256ccd696d2db03a16bedea25bba24a

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      dd66596565f3e21ea6a94a8b54a5c14ba82f55c80e129444831ba2fca75fd5cb

    • Size

      271KB

    • MD5

      5d4833eb214c52f6b08a50ce6c4f17dd

    • SHA1

      c7da5144c19e720cf74138e76ff4a011cfd7fa55

    • SHA256

      dd66596565f3e21ea6a94a8b54a5c14ba82f55c80e129444831ba2fca75fd5cb

    • SHA512

      cbc89227024d622f26b0a6ee1213c8a8b9e02bc5fad558c6a3b5afd5651bf6788a2590d98e31a930f4623dfea575d10b8256ccd696d2db03a16bedea25bba24a

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks