systembc | 3acc979360b4496d3557182148b005a36f5334ea1b7efc42095c85aa0bf64372 | Triage

Sharing

General

Target

2f781ea76036a17bbd0c0f63be7cff12.dll.exe
Size

6.4MB
Sample

221224-j6qftahg43
MD5

2f781ea76036a17bbd0c0f63be7cff12
SHA1

b9b4c756949a038e87f4efd3569ba12c41a8e810
SHA256

3acc979360b4496d3557182148b005a36f5334ea1b7efc42095c85aa0bf64372
SHA512

c2b89d8be8438b9234a4cfeee4bd46535ec15dbf599c7553b957f0d3a8703fbd9dada2d2baa3b1a25b2bc58907f6db2f271d9d1926cac89d69912fb9e4f83208
SSDEEP

98304:/B853MGVQj4NoTQPxpl8SDI79SIcEj2gLmtGFG4nFDwAEtPqJkqdw6bDQ/:pIcGKeDxplo9F5LBFpMtiJkk8

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

89.22.236.225:4193

176.124.205.5:4193

Targets

- Target
  
  2f781ea76036a17bbd0c0f63be7cff12.dll.exe
- Size
  
  6.4MB
- MD5
  
  2f781ea76036a17bbd0c0f63be7cff12
- SHA1
  
  b9b4c756949a038e87f4efd3569ba12c41a8e810
- SHA256
  
  3acc979360b4496d3557182148b005a36f5334ea1b7efc42095c85aa0bf64372
- SHA512
  
  c2b89d8be8438b9234a4cfeee4bd46535ec15dbf599c7553b957f0d3a8703fbd9dada2d2baa3b1a25b2bc58907f6db2f271d9d1926cac89d69912fb9e4f83208
- SSDEEP
  
  98304:/B853MGVQj4NoTQPxpl8SDI79SIcEj2gLmtGFG4nFDwAEtPqJkqdw6bDQ/:pIcGKeDxplo9F5LBFpMtiJkk8
Score

10^/10

systembc trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2