Overview

overview

10

Static

static

10

62714a724a...bf.exe

windows7-x64

10

62714a724a...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62714a724abbfc87f6d3e46a446d5fbf.exe

  • Size

    32KB

  • Sample

    221127-vsjxnahe4w

  • MD5

    62714a724abbfc87f6d3e46a446d5fbf

  • SHA1

    eacf4b82e080c80d1bd121bcdfc35c52a28b4f0e

  • SHA256

    a62751453618735964f32c88d8dbf08d5e27d17b3109a2bb48a15f4ad661a372

  • SHA512

    b4f2d8339309b6c742eb4b9027b4486b1b2dafa28c0287bd8a28df9265df7cab2dd7542e263faccc20992e8d6b89f293bae7728efb16961697706976c028e1d1

  • SSDEEP

    768:HqPzUdiJ8dayafVcCSWYVYnPrryFbnpoJo2qKc6ziFg:YLJ8dayaaupDobnpo2RGh

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

89.248.163.218:443

Targets

    • Target

      62714a724abbfc87f6d3e46a446d5fbf.exe

    • Size

      32KB

    • MD5

      62714a724abbfc87f6d3e46a446d5fbf

    • SHA1

      eacf4b82e080c80d1bd121bcdfc35c52a28b4f0e

    • SHA256

      a62751453618735964f32c88d8dbf08d5e27d17b3109a2bb48a15f4ad661a372

    • SHA512

      b4f2d8339309b6c742eb4b9027b4486b1b2dafa28c0287bd8a28df9265df7cab2dd7542e263faccc20992e8d6b89f293bae7728efb16961697706976c028e1d1

    • SSDEEP

      768:HqPzUdiJ8dayafVcCSWYVYnPrryFbnpoJo2qKc6ziFg:YLJ8dayaaupDobnpo2RGh

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks