General

  • Target

    socks_tor.exe

  • Size

    32KB

  • Sample

    230509-hbsf9age2y

  • MD5

    af6bc46db7a4d4ab3f4689848de18ddc

  • SHA1

    5e00ccab03314b6c37a0a16f646fb13b8d1072ab

  • SHA256

    c671384b86b7a99d4328402936f51ca9143543f8e6f715c8315e18d2e3c660e6

  • SHA512

    81260938cc4b68cd61ed496ba99a873b2abdce7a57f27f9cbdab2acd1e70cade3acb394f0a2da01e4a3935deccf1b4006f550c38c2dbc1c4f2c19ad22a04250c

  • SSDEEP

    768:HqPzUdiJ8dayafVcCSWYVYnPrryFbnpoJo2TZKc6wFg:YLJ8dayaaupDobnpo2wZu

Score
10/10

Malware Config

Extracted

Family

systembc

C2

89.248.163.188:443

Targets

    • Target

      socks_tor.exe

    • Size

      32KB

    • MD5

      af6bc46db7a4d4ab3f4689848de18ddc

    • SHA1

      5e00ccab03314b6c37a0a16f646fb13b8d1072ab

    • SHA256

      c671384b86b7a99d4328402936f51ca9143543f8e6f715c8315e18d2e3c660e6

    • SHA512

      81260938cc4b68cd61ed496ba99a873b2abdce7a57f27f9cbdab2acd1e70cade3acb394f0a2da01e4a3935deccf1b4006f550c38c2dbc1c4f2c19ad22a04250c

    • SSDEEP

      768:HqPzUdiJ8dayafVcCSWYVYnPrryFbnpoJo2TZKc6wFg:YLJ8dayaaupDobnpo2wZu

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks