General

  • Target

    04a18da1c7e7c59cd5f27870221dc1e5.bin.exe

  • Size

    206KB

  • Sample

    230612-k9lgpsbg6y

  • MD5

    04a18da1c7e7c59cd5f27870221dc1e5

  • SHA1

    11ce4d54bb900f1d6eab8757b81464683a5775ef

  • SHA256

    89e5681774347bfa7e087385062bbd741446308c239beff8f1e2ad1613372aea

  • SHA512

    32807170b0b8dde6af968fd18554117c77e8be5be329a66b613bcbaea18f5015dc357aa73543eb04cc7fab198b582de98e74c494f3488da5cdd39262b2434892

  • SSDEEP

    3072:P9wYBQRVJlQYIkxkeg52vAqAcvw9Dz/EcDVVRdjXtDaH:FtOrJOYXe52HuD55jXt

Malware Config

Extracted

Family

systembc

C2

admex1955x.xyz:4044

servx2785x.xyz:4044

Targets

    • Target

      04a18da1c7e7c59cd5f27870221dc1e5.bin.exe

    • Size

      206KB

    • MD5

      04a18da1c7e7c59cd5f27870221dc1e5

    • SHA1

      11ce4d54bb900f1d6eab8757b81464683a5775ef

    • SHA256

      89e5681774347bfa7e087385062bbd741446308c239beff8f1e2ad1613372aea

    • SHA512

      32807170b0b8dde6af968fd18554117c77e8be5be329a66b613bcbaea18f5015dc357aa73543eb04cc7fab198b582de98e74c494f3488da5cdd39262b2434892

    • SSDEEP

      3072:P9wYBQRVJlQYIkxkeg52vAqAcvw9Dz/EcDVVRdjXtDaH:FtOrJOYXe52HuD55jXt

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks