General

  • Target

    cf5066857f0e7419c2473c381a8a9071027c5ba608e28bb1da4877bf92bb628f

  • Size

    268KB

  • Sample

    220327-z6vnjadba5

  • MD5

    e598980dec936d77df5c353f49145ed3

  • SHA1

    7fac4ec0ebb8b22e05823ed8a4dc552e4f1cf090

  • SHA256

    cf5066857f0e7419c2473c381a8a9071027c5ba608e28bb1da4877bf92bb628f

  • SHA512

    10e9b19a607ef7d3b52f39a8d46c9a4c9a0e01b31ce76fb225a70b8d54aab1b4ff31c012ea0e84dae7d859be065f3608dc10117ed4e619576cdae7e6df558c99

Score
10/10

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      cf5066857f0e7419c2473c381a8a9071027c5ba608e28bb1da4877bf92bb628f

    • Size

      268KB

    • MD5

      e598980dec936d77df5c353f49145ed3

    • SHA1

      7fac4ec0ebb8b22e05823ed8a4dc552e4f1cf090

    • SHA256

      cf5066857f0e7419c2473c381a8a9071027c5ba608e28bb1da4877bf92bb628f

    • SHA512

      10e9b19a607ef7d3b52f39a8d46c9a4c9a0e01b31ce76fb225a70b8d54aab1b4ff31c012ea0e84dae7d859be065f3608dc10117ed4e619576cdae7e6df558c99

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks