Overview

overview

10

Static

static

b403730c8a...b9.exe

windows7_x64

10

b403730c8a...b9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b403730c8a4eb00c33d4cd564835b15d765f8978b30d6578b2350e5a7dedb2b9

  • Size

    375KB

  • Sample

    220418-l8mttabaeq

  • MD5

    8ceb7cb380ad45d1264ffb75ad6363e1

  • SHA1

    18311e80325eb3bce7f7d8197d5320c360fe42fd

  • SHA256

    b403730c8a4eb00c33d4cd564835b15d765f8978b30d6578b2350e5a7dedb2b9

  • SHA512

    f328de68f70d265f73a044a620dc549b2c02481c10d0a377e0cb8fd890e6fe5fb5fbd77ea45075ab2476407580beeac66b13c1a77cb0e0947b65574dec7be960

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

26asdcgd.com:4039

26asdcgd.xyz:4039

Targets

    • Target

      b403730c8a4eb00c33d4cd564835b15d765f8978b30d6578b2350e5a7dedb2b9

    • Size

      375KB

    • MD5

      8ceb7cb380ad45d1264ffb75ad6363e1

    • SHA1

      18311e80325eb3bce7f7d8197d5320c360fe42fd

    • SHA256

      b403730c8a4eb00c33d4cd564835b15d765f8978b30d6578b2350e5a7dedb2b9

    • SHA512

      f328de68f70d265f73a044a620dc549b2c02481c10d0a377e0cb8fd890e6fe5fb5fbd77ea45075ab2476407580beeac66b13c1a77cb0e0947b65574dec7be960

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks