Overview

overview

10

Static

static

10

server.exe

windows7-x64

8

server.exe

windows10-2004-x64

8

server.out

ubuntu-18.04-amd64

7

socks.out

ubuntu-18.04-amd64

7

www/system...ip2.js

windows7-x64

1

www/system...ip2.js

windows10-2004-x64

1

www/system...x.html

windows7-x64

1

www/system...x.html

windows10-2004-x64

1

www/system...ord.js

windows7-x64

1

www/system...ord.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35da946b55a7125ac91be532a686c501.zip

  • Size

    27.3MB

  • MD5

    124c7d3fd6012d5e1236d66d35da9cb2

  • SHA1

    430ed90e5b2d603e43745b1a62a8d66039b1c811

  • SHA256

    d817131a06e282101d1da0a44df9b273f2c65bd0f4dd7cd9ef8e74ed49ce57e4

  • SHA512

    8554ca61eef6136efd5fbedc4c68aaaa9dca77723ed596fd5950a3f2f99f3a1d8776ef7f4ec39ccf88d9c8ebd5d0cb5a073f777aaf6ea8701869948774d2f73a

  • SSDEEP

    786432:+1HVpI/ZHgDZAgSjEcIiQKFoPIj84PLNA57cZqToX:a1emAGnbIj84PJAcZG4

Score
10/10
systembc

Malware Config

Extracted

Family

systembc

C2

87.244.158.94

Signatures

  • Systembc family
    systembc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 35da946b55a7125ac91be532a686c501.zip
    .zip
  • install.txt
  • server.exe
    .exe windows x64

    20293b10112f971cfd5c0d157ef0eef1


    Headers

    Imports

    Sections

  • server.out
    .elf linux x64
  • socks.out
    .elf linux x64
  • www/systembc/geoip/GeoLite2-City.mmdb
  • www/systembc/geoip/geoip2.phar
    .js
  • www/systembc/index.html
  • www/systembc/password.php
    .js