Overview

overview

10

Static

static

1

171460a017...88.exe

windows7-x64

10

171460a017...88.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-03-2023 07:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    171460a017024e874e3bfd84221f3a88.exe

  • Size

    359KB

  • MD5

    171460a017024e874e3bfd84221f3a88

  • SHA1

    5dc5c62289872fc020821249c12af52784017d78

  • SHA256

    5e19e7fc39a959eae012efb699bca70cfca8591da0d4e893699d8c2f47abd99f

  • SHA512

    b99bf2481f95c4f73a31afe0743e485d423f446ad3655fa34f65bb36ce63a709dce5bc697175626cd5c878b8873556355cc4f5c9cfd7692b0812adf42d5c7c7f

  • SSDEEP

    3072:esrgSP1xi3JtLnDY7KDXItvL5S/09GPd6xWdJJ:9u27i9/0UeW

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

85.239.54.190:443

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

Processes

  • C:\Users\Admin\AppData\Local\Temp\171460a017024e874e3bfd84221f3a88.exe
    "C:\Users\Admin\AppData\Local\Temp\171460a017024e874e3bfd84221f3a88.exe"
    1⤵
      PID:4924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4924-134-0x0000000000630000-0x0000000000633000-memory.dmp
      Filesize

      12KB

      Download
    • memory/4924-135-0x0000000000400000-0x00000000004DA000-memory.dmp
      Filesize

      872KB

      Download