Overview

overview

10

Static

static

3ef8f893bf...f9.exe

windows7_x64

10

3ef8f893bf...f9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9

  • Size

    264KB

  • Sample

    220419-gwr6jsbhg3

  • MD5

    05206e5eda097f54b8b1bcf23891ad80

  • SHA1

    2325f3f2a146432526208e733718dff80a65e86e

  • SHA256

    3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9

  • SHA512

    df1a8558357d4b7aa9b812f5f078fa6dc00584c3b5413ea13087cb5d156f3b5d202d56a50925860dd00ebb7d4c6108d100384f68638b07415e5e569282e32879

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

172.104.63.157:4001

Targets

    • Target

      3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9

    • Size

      264KB

    • MD5

      05206e5eda097f54b8b1bcf23891ad80

    • SHA1

      2325f3f2a146432526208e733718dff80a65e86e

    • SHA256

      3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9

    • SHA512

      df1a8558357d4b7aa9b812f5f078fa6dc00584c3b5413ea13087cb5d156f3b5d202d56a50925860dd00ebb7d4c6108d100384f68638b07415e5e569282e32879

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks