systembc | 22a094a2bdd1c3f865046f54b3cf3c958cf59f57f7a0ed9c0c31aadc8cf49ec4 | Triage

Sharing

General

Target

b63f57d948b00f885ce27af54.exe
Size

3.4MB
Sample

230709-t5lrcafc9t
MD5

b63f57d948b00f885ce27af54503df3a
SHA1

c74d0c64b4167b8da999a96fba52c3a75b00529d
SHA256

22a094a2bdd1c3f865046f54b3cf3c958cf59f57f7a0ed9c0c31aadc8cf49ec4
SHA512

be82579607ec9055416a1a5595fdd6bd13734a30ae55ac293772cb226553cd3033ec6fc8ba80b77a23716497f5adb72d676a17ead8a8ebeb66db01e5edf7ffe9
SSDEEP

98304:a830UshgHzyAUUxfystLGUtR/UfBt14SUyDIzC4ODoBZNlhK:arhMyO6aUpac+C4KoBl0

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

- Target
  
  b63f57d948b00f885ce27af54.exe
- Size
  
  3.4MB
- MD5
  
  b63f57d948b00f885ce27af54503df3a
- SHA1
  
  c74d0c64b4167b8da999a96fba52c3a75b00529d
- SHA256
  
  22a094a2bdd1c3f865046f54b3cf3c958cf59f57f7a0ed9c0c31aadc8cf49ec4
- SHA512
  
  be82579607ec9055416a1a5595fdd6bd13734a30ae55ac293772cb226553cd3033ec6fc8ba80b77a23716497f5adb72d676a17ead8a8ebeb66db01e5edf7ffe9
- SSDEEP
  
  98304:a830UshgHzyAUUxfystLGUtR/UfBt14SUyDIzC4ODoBZNlhK:arhMyO6aUpac+C4KoBl0
Score

10^/10

systembc trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2