Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff095e003a2c682f621f38fb626de2634479216803a401a144650b5fb24b9c7c

  • Size

    3.4MB

  • Sample

    230713-yw4m1sah59

  • MD5

    4aa7e4b29ba9c9c9a44ed8c096758956

  • SHA1

    253c8ec8609c83bd5e801b9c0bba98342ccabe1d

  • SHA256

    ff095e003a2c682f621f38fb626de2634479216803a401a144650b5fb24b9c7c

  • SHA512

    b7d81efedd2a3284be3d85bdfadf03ce2e2c13b413aaca0e7b5a475ee66c1ce92322c2735a1c7bf834f50f2b1aa3bb951c36ca9d59c8e7a95745aa2300a54da8

  • SSDEEP

    98304:/2FxZcK+W4xOvxSjuQxOYwRp/SfUrOVGMoOC6UeKmAhYhma:Ic4c0x/V3SsrHMoNyw

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

    • Target

      ff095e003a2c682f621f38fb626de2634479216803a401a144650b5fb24b9c7c

    • Size

      3.4MB

    • MD5

      4aa7e4b29ba9c9c9a44ed8c096758956

    • SHA1

      253c8ec8609c83bd5e801b9c0bba98342ccabe1d

    • SHA256

      ff095e003a2c682f621f38fb626de2634479216803a401a144650b5fb24b9c7c

    • SHA512

      b7d81efedd2a3284be3d85bdfadf03ce2e2c13b413aaca0e7b5a475ee66c1ce92322c2735a1c7bf834f50f2b1aa3bb951c36ca9d59c8e7a95745aa2300a54da8

    • SSDEEP

      98304:/2FxZcK+W4xOvxSjuQxOYwRp/SfUrOVGMoOC6UeKmAhYhma:Ic4c0x/V3SsrHMoNyw

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks