Overview

overview

10

Static

static

bff34ec881...08.exe

windows7-x64

10

bff34ec881...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d49997877451b110adc8e09d9c04c2b6.bin

  • Size

    1.5MB

  • Sample

    230127-rp6qgabf35

  • MD5

    d6a4aacf3e4ff514318b82c7d8ccef98

  • SHA1

    65332a72edbccac48de27d1c8f2e73ccfaf88085

  • SHA256

    5cdb9c207ee596235c10d2d0544a2475528cd87fb36b2d31c0c06196c5b69002

  • SHA512

    8968aa44a246bc05b7ae27b24f0e9116dc420509c227667a0f1bc626b5cbd2f9048ae3e7d37fc2c6e8b6e3135ae6a572ca2ea1f5afa8fb0f1e3972260ffeb865

  • SSDEEP

    24576:rhpntuOW1sNtEemi9wj21XiL+o1ZxqyOOd2ODCWw64DSJJkKpWJ3G+EnIAgo:rvtO1W4iWjT9BqyOTOmSJJFpWFG+Enco

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

89.22.225.242:4193

195.2.93.22:4193

Targets

    • Target

      bff34ec881bbe9726f025fcf4585150e98178bd2ecdbc7fc29939dbf554ab708.exe

    • Size

      1.7MB

    • MD5

      d49997877451b110adc8e09d9c04c2b6

    • SHA1

      602504addbd4df06c2ae5467a037edbf4fc41c16

    • SHA256

      bff34ec881bbe9726f025fcf4585150e98178bd2ecdbc7fc29939dbf554ab708

    • SHA512

      7e4e0acecf1b00234fb08c1441b6917cc3c65d4f9b27f369812ff0a719aee4dbae995d00b36ab7eaf97e09f8be27b54c0ec5a80043c3dd4b2340824d5c850664

    • SSDEEP

      49152:Zk7edbYPPeMgp1wQ4H4/Kof7Of6Dmq9zbrQn:Z/dMPPEYQlNqfVUQn

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks