Overview

overview

10

Static

static

1

29687fd74f...b0.exe

windows7-x64

10

29687fd74f...b0.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    09-04-2023 14:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    29687fd74f91709046335eccc4c796904903c36b8595f4d134366e243bca72b0.exe

  • Size

    316KB

  • MD5

    6c2d5bd21ea07e1cf2ef23fe4df8f9f2

  • SHA1

    29a51e269695f947fe4e462a85fb3f1f8b79212b

  • SHA256

    29687fd74f91709046335eccc4c796904903c36b8595f4d134366e243bca72b0

  • SHA512

    606535c8beddcca833aa0f9fd20e2ae79fcfcfb105b08b5bb48b325665e04b52c628b10a4a23a8995c1ab8574b2995e476d479485d83210c9f57e1667be9d06b

  • SSDEEP

    3072:IoqHR+X+bXLWafKQiJwB7GLeVSE76qq3JpQOJWmUza7o6YbFFEyuB:/qH9bXLNKJwsCScW3JpQsW87o6bz

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

148.251.236.201:443

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

Processes

  • C:\Users\Admin\AppData\Local\Temp\29687fd74f91709046335eccc4c796904903c36b8595f4d134366e243bca72b0.exe
    "C:\Users\Admin\AppData\Local\Temp\29687fd74f91709046335eccc4c796904903c36b8595f4d134366e243bca72b0.exe"
    1⤵
      PID:1220

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1220-55-0x0000000000230000-0x0000000000233000-memory.dmp
      Filesize

      12KB

      Download
    • memory/1220-56-0x0000000000400000-0x0000000002BBD000-memory.dmp
      Filesize

      39.7MB

      Download