General

  • Target

    3cbe19c2cf88bfbc4eac2980aad96aa2.exe

  • Size

    230KB

  • Sample

    220327-vrzlqaaga7

  • MD5

    3cbe19c2cf88bfbc4eac2980aad96aa2

  • SHA1

    3c94a02287f9307fe28a47770226098ce5081793

  • SHA256

    023e0ac5b8ee582ac8d8c1f36b96c8a87263e360428b0003b3159c876604be5f

  • SHA512

    c04e79744650e128156533f8d06798090a24f4852c96bf6f3506350fc101cfc4f6fe6dc2c25ec62ec343c8dc544cf6bf47d5e8f1f5ad734cb69ca26e4c645458

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      3cbe19c2cf88bfbc4eac2980aad96aa2.exe

    • Size

      230KB

    • MD5

      3cbe19c2cf88bfbc4eac2980aad96aa2

    • SHA1

      3c94a02287f9307fe28a47770226098ce5081793

    • SHA256

      023e0ac5b8ee582ac8d8c1f36b96c8a87263e360428b0003b3159c876604be5f

    • SHA512

      c04e79744650e128156533f8d06798090a24f4852c96bf6f3506350fc101cfc4f6fe6dc2c25ec62ec343c8dc544cf6bf47d5e8f1f5ad734cb69ca26e4c645458

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks