General

  • Target

    584e1b772abf47e40b94652be9117be8.exe

  • Size

    999KB

  • Sample

    230220-nqk9daag89

  • MD5

    584e1b772abf47e40b94652be9117be8

  • SHA1

    b41f90962e9c53617d93be473914364d5a180c6c

  • SHA256

    2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173

  • SHA512

    090912b6ae58d39ce157943590c9721e8d13dcbbbb98227edf2d776fe18f6ce49f04617f4fcef5cda4e42db90f658ebcac1f46853cd7df3b23877d50ad7433d2

  • SSDEEP

    24576:j0YP8i28caNN64mX1LRJIv48/sUmBfHZfunQi:VitXBR2v48/sNBsQi

Malware Config

Extracted

Family

systembc

C2

210.16.67.250:3000

192.168.1.28:3000

Targets

    • Target

      584e1b772abf47e40b94652be9117be8.exe

    • Size

      999KB

    • MD5

      584e1b772abf47e40b94652be9117be8

    • SHA1

      b41f90962e9c53617d93be473914364d5a180c6c

    • SHA256

      2e08b9cd0e2bb7ca4a8fdace85c5e80ebab87986ed6541a056ff31bdc272f173

    • SHA512

      090912b6ae58d39ce157943590c9721e8d13dcbbbb98227edf2d776fe18f6ce49f04617f4fcef5cda4e42db90f658ebcac1f46853cd7df3b23877d50ad7433d2

    • SSDEEP

      24576:j0YP8i28caNN64mX1LRJIv48/sUmBfHZfunQi:VitXBR2v48/sNBsQi

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks