Overview

overview

10

Static

static

3

4406711113...28.exe

windows7-x64

10

4406711113...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00e2db89532040c67ffd107ce99200ff.bin

  • Size

    158KB

  • Sample

    230607-bcmttsgg51

  • MD5

    115611d09d108035c8b035cab2b4573b

  • SHA1

    c44602fe539b4c6d3002c5bd4e6046dc8e396dac

  • SHA256

    762609e4a697f34cbadaf4f6fbd1bcc5fc178eb51bba0854e97a2428202351a3

  • SHA512

    f51b63d8512279b499772711eed940dff79461f4d7a75a7b1d60c1bf3fbfcb53bb00e9f51e7b8f3ac738573fd4e678973c36ec92f9de76f8e95f5f2dc18bba21

  • SSDEEP

    3072:+VqBXmBBGhJh0MnBR0JPu0jO7L/NfEW+rpzNB7nTys75xrdqLyFyHTWO:+VoXWohB0PumcrNfEhrp5tPrJqOwzT

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

23.95.44.228:53

Targets

    • Target

      4406711113df2e32ba7a4d0ca3befc8f2572646d6b48e494fd42633fed60e328.exe

    • Size

      263KB

    • MD5

      00e2db89532040c67ffd107ce99200ff

    • SHA1

      ecfa050c622f9a8937c241f4612b18e71a10b37f

    • SHA256

      4406711113df2e32ba7a4d0ca3befc8f2572646d6b48e494fd42633fed60e328

    • SHA512

      e0db858ada8ab45ce009db7cdc3613496951cc9c27b68dec72586d68dbf605e43e9a4a616418710065a121046c8d03eb77b9131522677d1d1e527ce1b7e89b47

    • SSDEEP

      3072:BgU/XdoE8Rk3EXyEx6lnortV5sEqirdUkx+uzyHvP0AwpRPfMvgpm9jDQi9j0dUR:WUVogdlqP5SLyyEVRPfMJQiUA

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks