systembc | c1f83eca657eb74769e9df053eb430c11cbcb123004179f2196fec6f45e48099 | Triage

Sharing

General

Target

c1f83eca657eb74769e9df053eb430c11cbcb123004179f2196fec6f45e48099
Size

900KB
Sample

221209-xgcejsgg2x
MD5

eb8481241f6347275135e63babf426e7
SHA1

9619feea2a3af4d1d08116ee7053c11eb8039962
SHA256

c1f83eca657eb74769e9df053eb430c11cbcb123004179f2196fec6f45e48099
SHA512

45fa8f03d2a1752aed82bda562a710d33057ae82d316827c0d503f4fca868f13d9b8da5f612cc8290bd1bce1b9b33e85d3e96c328583e2b2bfdf275e0e5264f9
SSDEEP

24576:D41L5Y9ORyViS5qWJwQUW+aekXKdrxb4:w2YM2tYadrx

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

104.238.140.73:4177

149.28.72.85:4177

Targets

- Target
  
  c1f83eca657eb74769e9df053eb430c11cbcb123004179f2196fec6f45e48099
- Size
  
  900KB
- MD5
  
  eb8481241f6347275135e63babf426e7
- SHA1
  
  9619feea2a3af4d1d08116ee7053c11eb8039962
- SHA256
  
  c1f83eca657eb74769e9df053eb430c11cbcb123004179f2196fec6f45e48099
- SHA512
  
  45fa8f03d2a1752aed82bda562a710d33057ae82d316827c0d503f4fca868f13d9b8da5f612cc8290bd1bce1b9b33e85d3e96c328583e2b2bfdf275e0e5264f9
- SSDEEP
  
  24576:D41L5Y9ORyViS5qWJwQUW+aekXKdrxb4:w2YM2tYadrx
Score

10^/10

systembc trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2