systembc | 2369bd280fe47d796e83ec2ff2fe6ca1503fb0bb5dc11c87aada9b182044c52d | Triage

Sharing

General

Target

9872f989cd453187ec12ffd4744be0db.exe
Size

3.5MB
Sample

230711-m7d1ysgf36
MD5

9872f989cd453187ec12ffd4744be0db
SHA1

388ac3aa97f2d75af095cb6b3e3bea39ca2f0798
SHA256

2369bd280fe47d796e83ec2ff2fe6ca1503fb0bb5dc11c87aada9b182044c52d
SHA512

febb2b085cad00bfb79106ee8062298e37b175b6bfc33bfbde774d5fbf82aedc9b0f5addf2f1ad9d1d5509cb422cc13f1f29d622722f58098b7e3057a4a2090c
SSDEEP

98304:/nQyuNYyGQEn8c2JTNV7ziZ+tsrwWlTg1ij342dFbF:vQfWQEp2VNQMeVg1O3

Score

10^/10

systembc trojan

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

- Target
  
  9872f989cd453187ec12ffd4744be0db.exe
- Size
  
  3.5MB
- MD5
  
  9872f989cd453187ec12ffd4744be0db
- SHA1
  
  388ac3aa97f2d75af095cb6b3e3bea39ca2f0798
- SHA256
  
  2369bd280fe47d796e83ec2ff2fe6ca1503fb0bb5dc11c87aada9b182044c52d
- SHA512
  
  febb2b085cad00bfb79106ee8062298e37b175b6bfc33bfbde774d5fbf82aedc9b0f5addf2f1ad9d1d5509cb422cc13f1f29d622722f58098b7e3057a4a2090c
- SSDEEP
  
  98304:/nQyuNYyGQEn8c2JTNV7ziZ+tsrwWlTg1ij342dFbF:vQfWQEp2VNQMeVg1O3
Score

10^/10

systembc trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2