Overview

overview

10

Static

static

1

894f993223...26.exe

windows7-x64

10

894f993223...26.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2023 18:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    894f9932230d19be88b202b1c2ff5e26.exe

  • Size

    281KB

  • MD5

    894f9932230d19be88b202b1c2ff5e26

  • SHA1

    2c64119d370794f83d54b8de1f3b3458c13ca800

  • SHA256

    2cc2a00ca1241e2ed9d3c3c143e5f83a21ae91f7dba03f91e3892885251d7b7e

  • SHA512

    f5247f3db2a2dd9d955ac3ddfcd0f7fa3f0f7aa9e23c73dabecf63c9be2c73527bcb41bf68d0f0a9926a729d93008d3ac7dd53bc92c672c772584050f3efc850

  • SSDEEP

    3072:BAS2/zPL6FINuTN+IGittHNVQhTsuj96er5pAjTeeELYNm2YxaZs+spq+Hz:H6PLnU2W9NEzcerzeELXRLUO

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

149.248.14.222:443

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

Processes

  • C:\Users\Admin\AppData\Local\Temp\894f9932230d19be88b202b1c2ff5e26.exe
    "C:\Users\Admin\AppData\Local\Temp\894f9932230d19be88b202b1c2ff5e26.exe"
    1⤵
      PID:924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/924-55-0x0000000000220000-0x0000000000223000-memory.dmp
      Filesize

      12KB

      Download
    • memory/924-56-0x0000000000400000-0x00000000004C9000-memory.dmp
      Filesize

      804KB

      Download