General

  • Target

    97a9fa55178dfe2851bb26c7b9a1901b795f7b73ea41ec6c2e312db778d0f716

  • Size

    327KB

  • Sample

    220928-kwtwxsgehk

  • MD5

    ddb4d3c5ec363c148445581709c261fd

  • SHA1

    f5b9739ac522ee977d626450efe146aede362366

  • SHA256

    97a9fa55178dfe2851bb26c7b9a1901b795f7b73ea41ec6c2e312db778d0f716

  • SHA512

    94a88f80f856f99452e48a910c2b5e616ad94c3ad7aa5aa2d1b9fae461f38a03b82fe0c9e35dbcec2029dc72ccc2fcfb347bc7e90bd53f3e54f40377b1d10753

  • SSDEEP

    6144:xfLFLcVcwMbfDjZArmiGZ0AO5ldf4knigabwVfs:xfLtcCwcfDlALbAO5lBiB

Score
10/10

Malware Config

Extracted

Family

systembc

C2

141.98.82.229:4001

Targets

    • Target

      97a9fa55178dfe2851bb26c7b9a1901b795f7b73ea41ec6c2e312db778d0f716

    • Size

      327KB

    • MD5

      ddb4d3c5ec363c148445581709c261fd

    • SHA1

      f5b9739ac522ee977d626450efe146aede362366

    • SHA256

      97a9fa55178dfe2851bb26c7b9a1901b795f7b73ea41ec6c2e312db778d0f716

    • SHA512

      94a88f80f856f99452e48a910c2b5e616ad94c3ad7aa5aa2d1b9fae461f38a03b82fe0c9e35dbcec2029dc72ccc2fcfb347bc7e90bd53f3e54f40377b1d10753

    • SSDEEP

      6144:xfLFLcVcwMbfDjZArmiGZ0AO5ldf4knigabwVfs:xfLtcCwcfDlALbAO5lBiB

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks