systembc | c25fcb9ebf8f56a91294910d0376986ca305ef1f7ce92750a19edec9a0d0c659 | Triage

Resubmissions

21-12-2022 13:15

221221-qhcy5sfd9x 10

21-12-2022 02:23

221221-cvhhhaef2w 10

Sharing

General

Target

syncfiles32.dll
Size

6.8MB
Sample

221221-cvhhhaef2w
MD5

cc4eb5690903e06b55c7aded2023b88f
SHA1

0ad6db10bb08bda4bdb58bc609e1c10a1d97f859
SHA256

c25fcb9ebf8f56a91294910d0376986ca305ef1f7ce92750a19edec9a0d0c659
SHA512

0fbc292d3e754a388a11f052b5b0e58d66b3e2f35464e6c2736b3b2d0510e01240f945f2269e8a22bfad73a91024801da688a387a65f791f7d85d0ee91040408
SSDEEP

196608:Hf4HBWmiaZGDsFQKCT7IRSwMeDoegfaJ88:HfSBBgGQKlRieEegS28

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

89.22.236.225:4193

176.124.205.5:4193

Targets

- Target
  
  syncfiles32.dll
- Size
  
  6.8MB
- MD5
  
  cc4eb5690903e06b55c7aded2023b88f
- SHA1
  
  0ad6db10bb08bda4bdb58bc609e1c10a1d97f859
- SHA256
  
  c25fcb9ebf8f56a91294910d0376986ca305ef1f7ce92750a19edec9a0d0c659
- SHA512
  
  0fbc292d3e754a388a11f052b5b0e58d66b3e2f35464e6c2736b3b2d0510e01240f945f2269e8a22bfad73a91024801da688a387a65f791f7d85d0ee91040408
- SSDEEP
  
  196608:Hf4HBWmiaZGDsFQKCT7IRSwMeDoegfaJ88:HfSBBgGQKlRieEegS28
Score

10^/10

systembc trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2