Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    816dc3c379ba79217bf4ed44f5c6c4c5582be90bceb693a3f48c7e8fed04ac80

  • Size

    254KB

  • Sample

    220328-bbxyeabedj

  • MD5

    302deb97018b683371ff1b8d316a12dd

  • SHA1

    23d52e65ac280d5ee23d6698f5950ff989f2c39a

  • SHA256

    816dc3c379ba79217bf4ed44f5c6c4c5582be90bceb693a3f48c7e8fed04ac80

  • SHA512

    8c7947dacdfe2d1985bfa36277e2a04d57dce7db68e88614de23c04efa5e577dd5b159c622f2da486c4f7da6c96b1ad9c3204f7b49d76ff8af0b4abb18c8ec14

Score
10/10
systembcsuricatatrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      816dc3c379ba79217bf4ed44f5c6c4c5582be90bceb693a3f48c7e8fed04ac80

    • Size

      254KB

    • MD5

      302deb97018b683371ff1b8d316a12dd

    • SHA1

      23d52e65ac280d5ee23d6698f5950ff989f2c39a

    • SHA256

      816dc3c379ba79217bf4ed44f5c6c4c5582be90bceb693a3f48c7e8fed04ac80

    • SHA512

      8c7947dacdfe2d1985bfa36277e2a04d57dce7db68e88614de23c04efa5e577dd5b159c622f2da486c4f7da6c96b1ad9c3204f7b49d76ff8af0b4abb18c8ec14

    Score
    10/10
    systembcsuricatatrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

      suricata

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata

    • suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata: ET MALWARE Win32/SystemBC CnC Checkin

      suricata

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix

Tasks