General

  • Target

    b3f12e9d8014c04bd829bcff42b91186.exe

  • Size

    230KB

  • Sample

    220327-vsjlwsagb4

  • MD5

    b3f12e9d8014c04bd829bcff42b91186

  • SHA1

    e64f8b6f9092808e8049cbd9c2fe070736db2bcc

  • SHA256

    00d563277c832ba6a0d12f7b32f5ba19aac623bfaaabc8837d47bd6e985cd555

  • SHA512

    801a0ea4bdad8a1d249fb5001eff9424bc03832097a696b4a462e80146ac7d2aa7907bd50535af1c231c74271b7991e431a45d69da3914c7181e061891f90281

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      b3f12e9d8014c04bd829bcff42b91186.exe

    • Size

      230KB

    • MD5

      b3f12e9d8014c04bd829bcff42b91186

    • SHA1

      e64f8b6f9092808e8049cbd9c2fe070736db2bcc

    • SHA256

      00d563277c832ba6a0d12f7b32f5ba19aac623bfaaabc8837d47bd6e985cd555

    • SHA512

      801a0ea4bdad8a1d249fb5001eff9424bc03832097a696b4a462e80146ac7d2aa7907bd50535af1c231c74271b7991e431a45d69da3914c7181e061891f90281

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks