Overview

overview

10

Static

static

10

socks.exe

windows7-x64

10

socks.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    socks.exe

  • Size

    32KB

  • Sample

    221122-f94k3abf26

  • MD5

    f6fc8a2495fb25c71b3e7a355628b19f

  • SHA1

    dce93888658c9e20bce5bc0ba829230966ea25d8

  • SHA256

    1972e8136931f0b0fcc9ce917c9eeed13a5fd261c6453173d69bce28bfa1af54

  • SHA512

    88eb7b301423e22fb91b3de69f411f531b56aa45838b4ca72780a293c726a222921a31ebb1a5ecd6298e254209d0600cd4106819c514bbc0c74fd0b037e02946

  • SSDEEP

    768:nEda2pzI7icyFK4JP7YSud6gfzsUwdgug5oJa2crh:nEdI7icyFvPVoGgX5o

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

95.161.131.6:4001

45.153.240.152:4001

Targets

    • Target

      socks.exe

    • Size

      32KB

    • MD5

      f6fc8a2495fb25c71b3e7a355628b19f

    • SHA1

      dce93888658c9e20bce5bc0ba829230966ea25d8

    • SHA256

      1972e8136931f0b0fcc9ce917c9eeed13a5fd261c6453173d69bce28bfa1af54

    • SHA512

      88eb7b301423e22fb91b3de69f411f531b56aa45838b4ca72780a293c726a222921a31ebb1a5ecd6298e254209d0600cd4106819c514bbc0c74fd0b037e02946

    • SSDEEP

      768:nEda2pzI7icyFK4JP7YSud6gfzsUwdgug5oJa2crh:nEdI7icyFvPVoGgX5o

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks