Overview

overview

10

Static

static

10

a21619b981...b9.exe

windows7-x64

4

a21619b981...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a21619b981f4e2b4a1858f0457b42491ef99688278816a66e0652d745e110bb9.zip

  • Size

    6KB

  • Sample

    230405-ylp2wabc2x

  • MD5

    15530ecc5e57f61450efb94bdc3ec885

  • SHA1

    3eff4592bcd47cb976eb6e05529cf7b17cd30318

  • SHA256

    19363b70d7ccdbf10eb7633628f1e0d08fb0f85cff897fd758cf2b61c93abd81

  • SHA512

    e175acaa5fc3be5022c28d65bba4e1a0879359b37112c9ef77fd8ecbd4533d41f76d649abd3cf5a9a84d2675558fd5fcdb6d8fef14258e8b4e1e6e633a1d11f7

  • SSDEEP

    96:kXgI240vZB3XrCoy6ucNm9Uq8i8EIiTvxCreAEOZllQU7uGjnTgp/EcoI1s3duyn:lTVRVuW2UJi8k/RiDQSugUp/HKdNUO

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

185.198.56.2:4171

Targets

    • Target

      a21619b981f4e2b4a1858f0457b42491ef99688278816a66e0652d745e110bb9.exe

    • Size

      13KB

    • MD5

      489e088030eae6acf86c690cb42352b4

    • SHA1

      943a6abb8d2ff25ae6b54c953b211879328a5123

    • SHA256

      a21619b981f4e2b4a1858f0457b42491ef99688278816a66e0652d745e110bb9

    • SHA512

      78e7d85f57f0b85a71c617d4bea8783b433340a006756064181745a85b3de8d49f66ca3b460414406d1e83b525134aba0f6451c53b95f5ed482604c8395e6b99

    • SSDEEP

      192:C2WjQTbZ1eBppvfj/j2+cPM3P+Q/tCvwSw3uM76V9bhHOkrUN9:C2jTbZ0pj/vcqP+ctCYSw3GV9bhrUN

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks