systembc | 2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173 | Triage

Sharing

General

Target

2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173
Size

999KB
Sample

230220-m74llsag43
MD5

584e1b772abf47e40b94652be9117be8
SHA1

b41f90962e9c53617d93be473914364d5a180c6c
SHA256

2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173
SHA512

090912b6ae58d39ce157943590c9721e8d13dcbbbb98227edf2d776fe18f6ce49f04617f4fcef5cda4e42db90f658ebcac1f46853cd7df3b23877d50ad7433d2
SSDEEP

24576:j0YP8i28caNN64mX1LRJIv48/sUmBfHZfunQi:VitXBR2v48/sNBsQi

Score

10^/10

systembc persistence trojan

Malware Config

Extracted

Family

systembc

C2

210.16.67.250:3000

192.168.1.28:3000

Targets

- Target
  
  2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173
- Size
  
  999KB
- MD5
  
  584e1b772abf47e40b94652be9117be8
- SHA1
  
  b41f90962e9c53617d93be473914364d5a180c6c
- SHA256
  
  2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173
- SHA512
  
  090912b6ae58d39ce157943590c9721e8d13dcbbbb98227edf2d776fe18f6ce49f04617f4fcef5cda4e42db90f658ebcac1f46853cd7df3b23877d50ad7433d2
- SSDEEP
  
  24576:j0YP8i28caNN64mX1LRJIv48/sUmBfHZfunQi:VitXBR2v48/sNBsQi
Score

10^/10

systembc persistence trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

systembcpersistencetrojan