Overview

overview

10

Static

static

0632ad6072...07.exe

windows7_x64

10

0632ad6072...07.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0632ad6072c34481aacebfe013d10f2318fdab7d840825d3de87c9af556d1207

  • Size

    865KB

  • Sample

    220328-w4svdahedm

  • MD5

    662d6d75d39e86db52e4d36f1acd34e2

  • SHA1

    cd6aad03156b723cdff672a0f9603809c310f45d

  • SHA256

    0632ad6072c34481aacebfe013d10f2318fdab7d840825d3de87c9af556d1207

  • SHA512

    8b6085f923b5d6c07904052a9b451986f28de76d60e765a9f5840d6efe2a4f1f26d1a07170656cf796c99ab1951dfa33964a5bb781731d45f0ca778f1559657a

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

179.43.178.96:4141

192.168.1.149:4141

Targets

    • Target

      0632ad6072c34481aacebfe013d10f2318fdab7d840825d3de87c9af556d1207

    • Size

      865KB

    • MD5

      662d6d75d39e86db52e4d36f1acd34e2

    • SHA1

      cd6aad03156b723cdff672a0f9603809c310f45d

    • SHA256

      0632ad6072c34481aacebfe013d10f2318fdab7d840825d3de87c9af556d1207

    • SHA512

      8b6085f923b5d6c07904052a9b451986f28de76d60e765a9f5840d6efe2a4f1f26d1a07170656cf796c99ab1951dfa33964a5bb781731d45f0ca778f1559657a

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks