Overview

overview

10

Static

static

3

04a18da1c7...in.exe

windows7-x64

10

04a18da1c7...in.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04a18da1c7e7c59cd5f27870221dc1e5.bin.exe

  • Size

    206KB

  • Sample

    230612-k9lgpsbg6y

  • MD5

    04a18da1c7e7c59cd5f27870221dc1e5

  • SHA1

    11ce4d54bb900f1d6eab8757b81464683a5775ef

  • SHA256

    89e5681774347bfa7e087385062bbd741446308c239beff8f1e2ad1613372aea

  • SHA512

    32807170b0b8dde6af968fd18554117c77e8be5be329a66b613bcbaea18f5015dc357aa73543eb04cc7fab198b582de98e74c494f3488da5cdd39262b2434892

  • SSDEEP

    3072:P9wYBQRVJlQYIkxkeg52vAqAcvw9Dz/EcDVVRdjXtDaH:FtOrJOYXe52HuD55jXt

Score
10/10
systembcpersistencetrojan

Malware Config

Extracted

Family

systembc

C2

admex1955x.xyz:4044

servx2785x.xyz:4044

Targets

    • Target

      04a18da1c7e7c59cd5f27870221dc1e5.bin.exe

    • Size

      206KB

    • MD5

      04a18da1c7e7c59cd5f27870221dc1e5

    • SHA1

      11ce4d54bb900f1d6eab8757b81464683a5775ef

    • SHA256

      89e5681774347bfa7e087385062bbd741446308c239beff8f1e2ad1613372aea

    • SHA512

      32807170b0b8dde6af968fd18554117c77e8be5be329a66b613bcbaea18f5015dc357aa73543eb04cc7fab198b582de98e74c494f3488da5cdd39262b2434892

    • SSDEEP

      3072:P9wYBQRVJlQYIkxkeg52vAqAcvw9Dz/EcDVVRdjXtDaH:FtOrJOYXe52HuD55jXt

    Score
    10/10
    systembcpersistencetrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks