Analysis

  • max time kernel
    151s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    25-03-2023 13:51

General

  • Target

    b750bddf881fe2339e828d9cdff3720e.exe

  • Size

    196KB

  • MD5

    b750bddf881fe2339e828d9cdff3720e

  • SHA1

    156931894e7254daf62fac51d5e1246b65b5de6f

  • SHA256

    4b66c432858b2c0ec8cb9decada25624ae9846cc2e9c42164658c93a310b8c7a

  • SHA512

    feecf3ad36c04c648ba61cc43de39b71ee8990e426408dcac90c086bd191a4e7b73d120c553ba0ae4c9ea7f5dbf7dd70206a1fddd8ebf85a4cc123902af1a15c

  • SSDEEP

    3072:t7t696WCegwmvV72w/Ign/qqG8yzNeGpoJj735KbVynNOv:ts9Zyjvt2J/np+jtKww

Score
10/10

Malware Config

Extracted

Family

systembc

C2

144.76.235.89:8080

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b750bddf881fe2339e828d9cdff3720e.exe
    "C:\Users\Admin\AppData\Local\Temp\b750bddf881fe2339e828d9cdff3720e.exe"
    1⤵
      PID:928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/928-55-0x0000000000220000-0x0000000000223000-memory.dmp
      Filesize

      12KB

    • memory/928-56-0x0000000000400000-0x0000000000562000-memory.dmp
      Filesize

      1.4MB