5c947115e5de28bf753bdf423b76cec09ab76f339c62058392b603391cbf461f

General
Target

5c947115e5de28bf753bdf423b76cec09ab76f339c62058392b603391cbf461f

Size

247KB

Sample

220512-nv4arafhgp

Score
10 /10
MD5

aa00750f0df31493289bf07719cefd5e

SHA1

3c5b53cea10a28b955d1224ec2d293c639874593

SHA256

5c947115e5de28bf753bdf423b76cec09ab76f339c62058392b603391cbf461f

SHA512

cc679227e4e137885cfbf475e89f5832cbb3009b2e95aba661b6f2c973bc56672480e3c695daca6acf825fafcc8bc7e667ab92eb81da2d1aeb7d66deb55d7704

Malware Config

Extracted

Family systembc
C2

217.8.117.114:4062

213.159.213.225:4062

Targets
Target

5c947115e5de28bf753bdf423b76cec09ab76f339c62058392b603391cbf461f

MD5

aa00750f0df31493289bf07719cefd5e

Filesize

247KB

Score
10/10
SHA1

3c5b53cea10a28b955d1224ec2d293c639874593

SHA256

5c947115e5de28bf753bdf423b76cec09ab76f339c62058392b603391cbf461f

SHA512

cc679227e4e137885cfbf475e89f5832cbb3009b2e95aba661b6f2c973bc56672480e3c695daca6acf825fafcc8bc7e667ab92eb81da2d1aeb7d66deb55d7704

Tags

Signatures

  • SystemBC

    Description

    SystemBC is a proxy and remote administration tool first seen in 2019.

    Tags

  • Executes dropped EXE

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10