General

  • Target

    fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c

  • Size

    114KB

  • Sample

    230507-kr4kkaeb7v

  • MD5

    888bfc5a63177bdc5aaa1429eca8e632

  • SHA1

    3eca9ed178f35a94524a17356a60702d8d5d2e69

  • SHA256

    fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c

  • SHA512

    c95f454d559038393d55a7afc889e675ede6a8f5cdecf238f5b09ce8e0a88adc4c7e1d711c3c23469e086fe4e7beb6655b1810a5b085b137495c8db4890749ac

  • SSDEEP

    1536:s7Qo3iozw/t29drPAXKm7LZCYptjzPbo4XEJ3w+lczNAgs:jo3xzwsPY6AZCYpVz/f+yziB

Malware Config

Extracted

Family

systembc

C2

185.161.248.16:4440

Targets

    • Target

      fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c

    • Size

      114KB

    • MD5

      888bfc5a63177bdc5aaa1429eca8e632

    • SHA1

      3eca9ed178f35a94524a17356a60702d8d5d2e69

    • SHA256

      fc233bc51158c9250a005cab1d7e3b200722a675e392e799b11a5eef6503339c

    • SHA512

      c95f454d559038393d55a7afc889e675ede6a8f5cdecf238f5b09ce8e0a88adc4c7e1d711c3c23469e086fe4e7beb6655b1810a5b085b137495c8db4890749ac

    • SSDEEP

      1536:s7Qo3iozw/t29drPAXKm7LZCYptjzPbo4XEJ3w+lczNAgs:jo3xzwsPY6AZCYpVz/f+yziB

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks