Analysis
- max time kernel
291s - max time network
257s - platform
windows10-1703_x64 - resource
win10-20230703-en - resource tags
- submitted
22/07/2023, 22:13
General
- Target 792bce2f91e0ab94042cc4e682138f55f6b710d2613fef92864462d2a0a57865.exe
- Size 4.7MB
- Sample230722-1472hsch8v
- SHA256 792bce2f91e0ab94042cc4e682138f55f6b710d2613fef92864462d2a0a57865
Score
10/10
Malware Config
Extracted
Family
-
systembc
C2
-
91.103.252.89:4317
-
91.103.252.57:4317
Signatures
- SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
- Adds Run key to start application 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\792bce2f91e0ab94042cc4e682138f55f6b710d2613fef92864462d2a0a57865.exe"C:\Users\Admin\AppData\Local\Temp\792bce2f91e0ab94042cc4e682138f55f6b710d2613fef92864462d2a0a57865.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/436-120-0x00000000024D0000-0x00000000024D1000-memory.dmp
memory/436-121-0x0000000000400000-0x00000000008B9000-memory.dmp
memory/436-122-0x00000000024D0000-0x00000000024D1000-memory.dmp
memory/436-123-0x0000000004400000-0x0000000004849000-memory.dmp
memory/436-124-0x0000000000400000-0x00000000008B9000-memory.dmp