Overview

overview

10

Static

static

dridex

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c9ef5745181c229512ed61a6cb25882eb485ba295c6bb10c4a3e6aefb6533c5

  • Size

    273KB

  • Sample

    220327-ztk9bshbhm

  • MD5

    db48d4c7abbfe0c4daeba6ae790a193f

  • SHA1

    ee73e2598351f8088cb20d84398e45e7b0092d83

  • SHA256

    3c9ef5745181c229512ed61a6cb25882eb485ba295c6bb10c4a3e6aefb6533c5

  • SHA512

    dda02e130458496878850278bef01fb4660107acce9cb9d44308713ed960173645c68e5fceab54de1a63fa232061b2d31ddd68fd6daa718379dfb461d5784c5d

Score
10/10
systembcsuricatatrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      3c9ef5745181c229512ed61a6cb25882eb485ba295c6bb10c4a3e6aefb6533c5

    • Size

      273KB

    • MD5

      db48d4c7abbfe0c4daeba6ae790a193f

    • SHA1

      ee73e2598351f8088cb20d84398e45e7b0092d83

    • SHA256

      3c9ef5745181c229512ed61a6cb25882eb485ba295c6bb10c4a3e6aefb6533c5

    • SHA512

      dda02e130458496878850278bef01fb4660107acce9cb9d44308713ed960173645c68e5fceab54de1a63fa232061b2d31ddd68fd6daa718379dfb461d5784c5d

    Score
    10/10
    systembcsuricatatrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata

    • suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix

Tasks