Overview

overview

10

Static

static

10

C/ProgramD...0a.dll

windows7-x64

8

C/ProgramD...0a.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67be2a5e7b30a949b42a7306b7c2cd139da4133a2ec0c0afdb59218f4649130a.zip

  • Size

    7KB

  • Sample

    230421-r5hctagb38

  • MD5

    567938a0a4c49b89364a5e96cb3e5806

  • SHA1

    74fdf8213d9a174d191eef5742486666b4dd9659

  • SHA256

    eef158009be2df1c52ff9f202d39f6be60c9fb1850caed9fbe70ae4ebb0caffb

  • SHA512

    3466cc362fa29508cb07b7937ebf44f07e44d1862efb1ccabb8bc0415feee34540ec0843b4bbb06cd7de11b849947e9eb26d654a65d431373efed507c09fbfff

  • SSDEEP

    192:Nh3JHRAByDuiFyF+B75QNKvdKYmMVqdktWE:NtJxrSg4+BNCYmMQE

Score
10/10
systembc

Malware Config

Extracted

Family

systembc

C2

93.115.25.41:443

localhost.exchange:443

Targets

    • Target

      C/ProgramData/Sentinel/AFUCache/67be2a5e7b30a949b42a7306b7c2cd139da4133a2ec0c0afdb59218f4649130a

    • Size

      18KB

    • MD5

      f75996367aa816339ff6845dca5771bd

    • SHA1

      cb60d1e8c32c0b21798e06d30f47421a2622c7f7

    • SHA256

      67be2a5e7b30a949b42a7306b7c2cd139da4133a2ec0c0afdb59218f4649130a

    • SHA512

      b856a5a305ba889bb265b8b84a493f074f148f409a3421ca6c5fb37cc5cc193456c67b03620fe870306d38b8f3d2207e18d6029af03045e179b11282bf17a498

    • SSDEEP

      384:r3qHtu750gtxCYLcHtcWajpOnM/uQ9p/mvm12MGSsyV:r3Qgk/arfevmkw

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks