systembc | fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c | Triage

Sharing

General

Target

fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c
Size

114KB
Sample

230506-t22cmacb4x
MD5

888bfc5a63177bdc5aaa1429eca8e632
SHA1

3eca9ed178f35a94524a17356a60702d8d5d2e69
SHA256

fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c
SHA512

c95f454d559038393d55a7afc889e675ede6a8f5cdecf238f5b09ce8e0a88adc4c7e1d711c3c23469e086fe4e7beb6655b1810a5b085b137495c8db4890749ac
SSDEEP

1536:s7Qo3iozw/t29drPAXKm7LZCYptjzPbo4XEJ3w+lczNAgs:jo3xzwsPY6AZCYpVz/f+yziB

Score

10^/10

systembc persistence trojan

Malware Config

Extracted

Family

systembc

C2

185.161.248.16:4440

Targets

- Target
  
  fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c
- Size
  
  114KB
- MD5
  
  888bfc5a63177bdc5aaa1429eca8e632
- SHA1
  
  3eca9ed178f35a94524a17356a60702d8d5d2e69
- SHA256
  
  fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c
- SHA512
  
  c95f454d559038393d55a7afc889e675ede6a8f5cdecf238f5b09ce8e0a88adc4c7e1d711c3c23469e086fe4e7beb6655b1810a5b085b137495c8db4890749ac
- SSDEEP
  
  1536:s7Qo3iozw/t29drPAXKm7LZCYptjzPbo4XEJ3w+lczNAgs:jo3xzwsPY6AZCYpVz/f+yziB
Score

10^/10

systembc persistence trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

systembcpersistencetrojan