Overview

overview

10

Static

static

507d8c2edb...40.exe

windows7-x64

10

507d8c2edb...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    507d8c2edb4500f479f31320aeae9940.exe

  • Size

    792KB

  • Sample

    221123-wde6labf85

  • MD5

    507d8c2edb4500f479f31320aeae9940

  • SHA1

    d893a91a87cde424c90e699420f5c2235348e913

  • SHA256

    f9ff6bac08394cce4b892bc5875e3970bcdfaa83f3d7613b7f55968b410e85d7

  • SHA512

    e49a05e6375fd6212c57d6643ecbdcb52f641843a28bb4381256e5c422cb760c87810bcbbb15ceb0cd4dc9231a45e9369e2c6334778ac4f998a5043176183bb7

  • SSDEEP

    12288:+dpeb+ZKEqYDVVh/jQe9rZnuRX1klztojDMCSEPXMjSGaZlUP9XqZCphS5p:+dpXKEFDVZ9rZnuYojIC3M9XqkPM

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

146.70.86.61:443

Targets

    • Target

      507d8c2edb4500f479f31320aeae9940.exe

    • Size

      792KB

    • MD5

      507d8c2edb4500f479f31320aeae9940

    • SHA1

      d893a91a87cde424c90e699420f5c2235348e913

    • SHA256

      f9ff6bac08394cce4b892bc5875e3970bcdfaa83f3d7613b7f55968b410e85d7

    • SHA512

      e49a05e6375fd6212c57d6643ecbdcb52f641843a28bb4381256e5c422cb760c87810bcbbb15ceb0cd4dc9231a45e9369e2c6334778ac4f998a5043176183bb7

    • SSDEEP

      12288:+dpeb+ZKEqYDVVh/jQe9rZnuRX1klztojDMCSEPXMjSGaZlUP9XqZCphS5p:+dpXKEFDVZ9rZnuYojIC3M9XqkPM

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks