Overview

overview

10

Static

static

3

be86ac4e00...e8.exe

windows7-x64

10

be86ac4e00...e8.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2023 06:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    be86ac4e00830934b636abedf639f9e8.exe

  • Size

    230KB

  • MD5

    be86ac4e00830934b636abedf639f9e8

  • SHA1

    7a05a17ea713f7b211ba1828a3b047f099d02f70

  • SHA256

    98e0d98ce2fdbe02482ac0a443de40943ff064ab17180d448f691a046647edf2

  • SHA512

    958374e7440a83e11266e6f181b2f3ade39c7f60c2ffd3a7f2dab7ac6a0fdc2e258b8cc92205f58aa91081e5a2293293f604999dd419815fb7df70c84d922ad5

  • SSDEEP

    3072:+y0428BfdROFe+qJkoTmNeok0Xt2S0rJQRxL8LTO7OEMW2oAYwj5:O4LFdROFTqJPUBk0XUHrJQRpKO7mm

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

162.252.175.101:443

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

Processes

  • C:\Users\Admin\AppData\Local\Temp\be86ac4e00830934b636abedf639f9e8.exe
    "C:\Users\Admin\AppData\Local\Temp\be86ac4e00830934b636abedf639f9e8.exe"
    1⤵
      PID:1932

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1932-55-0x00000000003C0000-0x00000000003C3000-memory.dmp
      Filesize

      12KB

      Download
    • memory/1932-56-0x0000000000400000-0x0000000001B3B000-memory.dmp
      Filesize

      23.2MB

      Download