General

  • Target

    a5dc84b36a250eea7c2e60c1c60e99fa3b93cb2816583bf03512329d450df063

  • Size

    271KB

  • Sample

    220327-ngzemsggf6

  • MD5

    478b4b789a540591f865b98df89e1c2a

  • SHA1

    233dbfe7b48eafd47e6615eb4353d7daef569e70

  • SHA256

    a5dc84b36a250eea7c2e60c1c60e99fa3b93cb2816583bf03512329d450df063

  • SHA512

    83f002aae264eb1932ed968afb2ac0d70f3696c99659030800459bccfcc6cf3164e4f2cd211976fe4074281db24820b557368583f58160c877e9f81de3b7301e

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      a5dc84b36a250eea7c2e60c1c60e99fa3b93cb2816583bf03512329d450df063

    • Size

      271KB

    • MD5

      478b4b789a540591f865b98df89e1c2a

    • SHA1

      233dbfe7b48eafd47e6615eb4353d7daef569e70

    • SHA256

      a5dc84b36a250eea7c2e60c1c60e99fa3b93cb2816583bf03512329d450df063

    • SHA512

      83f002aae264eb1932ed968afb2ac0d70f3696c99659030800459bccfcc6cf3164e4f2cd211976fe4074281db24820b557368583f58160c877e9f81de3b7301e

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks