Overview

overview

10

Static

static

9198652410...1b.exe

windows7_x64

10

9198652410...1b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7357456128.zip

  • Size

    75KB

  • Sample

    220421-v2lgvaehg6

  • MD5

    94767c5144490a6a0416d72f433b7296

  • SHA1

    6758f8a0e546508f46e6343b38568c6658adaf4b

  • SHA256

    c3f99021312538bb88c4983b9a40695b76282e079a15527898f76c40141842c0

  • SHA512

    deefcbc026eea1f450a15337f85a3b1b844eb9051b08d7afd6b0e36de935eb50a68e1610ea6ea598fc28678a98942d712c1c8c57c9fee517744769789804eec3

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

31.44.185.6:4001

31.44.185.11:4001

Targets

    • Target

      91986524100d33a7e5be16a9ccf4d23b18e7e3a2023a51fed268d36fdd79961b

    • Size

      224KB

    • MD5

      0385e5a0d48517e81fe65e60c3f42575

    • SHA1

      38069f26ba3cdc1573c51561084c9c09eb073075

    • SHA256

      91986524100d33a7e5be16a9ccf4d23b18e7e3a2023a51fed268d36fdd79961b

    • SHA512

      dd117c45b5fb5cb8dcaa0e907b1ec31379d9b904282ed3cac81acd7665407d93ce628658730e8bf45bbe4123265cf09d5d587599dacc6bf60c2f4b01b031efda

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks