Overview

overview

10

Static

static

10

1332-55-0x...ry.dll

windows7-x64

10

1332-55-0x...ry.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1332-55-0x000007FEF61C0000-0x000007FEF66F2000-memory.dmp

  • Size

    5.2MB

  • Sample

    230623-p8s8daeh65

  • MD5

    568a4056b2be640984ab8e3693b8605f

  • SHA1

    619143881538ae925d4b3bbd36cada5581b4c8af

  • SHA256

    7b13d5cea1797ed426be734ac146c7d07eccc743ab41ee2be7134f73a6905836

  • SHA512

    8d908573d5863f0993e627cdf571b79e8df62d5dba32ee3352651fa4bab1ccde294f759cac0d6052818ea89e3deb422e06797f336f346d6cde54235ec50e2123

  • SSDEEP

    98304:WjpVT7uv9amcCivg0pPb+/I+nuGBQ1ruWBW:WjruvoCiBpPK/DuUWBW

Score
10/10
systembcthemidatrojan

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

    • Target

      1332-55-0x000007FEF61C0000-0x000007FEF66F2000-memory.dmp

    • Size

      5.2MB

    • MD5

      568a4056b2be640984ab8e3693b8605f

    • SHA1

      619143881538ae925d4b3bbd36cada5581b4c8af

    • SHA256

      7b13d5cea1797ed426be734ac146c7d07eccc743ab41ee2be7134f73a6905836

    • SHA512

      8d908573d5863f0993e627cdf571b79e8df62d5dba32ee3352651fa4bab1ccde294f759cac0d6052818ea89e3deb422e06797f336f346d6cde54235ec50e2123

    • SSDEEP

      98304:WjpVT7uv9amcCivg0pPb+/I+nuGBQ1ruWBW:WjruvoCiBpPK/DuUWBW

    Score
    10/10
    systembcthemidatrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks