General

  • Target

    bf89b649f21af548c8966b3ce.exe

  • Size

    209KB

  • Sample

    230709-yhefzage7s

  • MD5

    bf89b649f21af548c8966b3ce5915fb6

  • SHA1

    397e45ea10a6e1d21c3c47a011295a7a4666dc1e

  • SHA256

    c457750d7351711f630c4349aee88f66247a10589cd27265cf9ab916ba204626

  • SHA512

    2f0d01b68931c2e175cc6c69891f8d6ffa61c5ce512a32b5ff8f809670338bb7e6b718566ec022576afa6b667529c7964d65cc3149c5ec6f84887d77f0c888d0

  • SSDEEP

    3072:9NixcocAj723IKDt7e103kSrey+R0llMc9XCYz2QJz65wWFo:ScAj723HReADrgR0lyoSYCczHW

Score
10/10

Malware Config

Extracted

Family

systembc

C2

148.251.236.201:443

Targets

    • Target

      bf89b649f21af548c8966b3ce.exe

    • Size

      209KB

    • MD5

      bf89b649f21af548c8966b3ce5915fb6

    • SHA1

      397e45ea10a6e1d21c3c47a011295a7a4666dc1e

    • SHA256

      c457750d7351711f630c4349aee88f66247a10589cd27265cf9ab916ba204626

    • SHA512

      2f0d01b68931c2e175cc6c69891f8d6ffa61c5ce512a32b5ff8f809670338bb7e6b718566ec022576afa6b667529c7964d65cc3149c5ec6f84887d77f0c888d0

    • SSDEEP

      3072:9NixcocAj723IKDt7e103kSrey+R0llMc9XCYz2QJz65wWFo:ScAj723HReADrgR0lyoSYCczHW

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks