Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48ceaeae87eed03ed8a4fb93d2fdf07c6401379114c7fd9581b0afc50407081c

  • Size

    4.7MB

  • Sample

    230722-ffbm7ahf78

  • MD5

    4937d137c3d462b948541ddda9b3cc63

  • SHA1

    7cbc7da1abbc8636002ecf87c89729e8f2c2beda

  • SHA256

    48ceaeae87eed03ed8a4fb93d2fdf07c6401379114c7fd9581b0afc50407081c

  • SHA512

    8ae9e0aaba0a0dc67814e2875aeda2e36073410140f3417a0d6204a369066c52c9b81a06feda579a2d1e31c16ee21dc67faff263039461dfa8f6589ad27598da

  • SSDEEP

    6144:vOaZsS4DFasluB04DdbHXrW2AmPxSB/lKfwmpjLkBGxmlTK:TZsFDFas+l3a2AYfnjxxM

Score
10/10
systembcpersistencetrojan

Malware Config

Extracted

Family

systembc

C2

91.103.252.89:4317

91.103.252.57:4317

Targets

    • Target

      48ceaeae87eed03ed8a4fb93d2fdf07c6401379114c7fd9581b0afc50407081c

    • Size

      4.7MB

    • MD5

      4937d137c3d462b948541ddda9b3cc63

    • SHA1

      7cbc7da1abbc8636002ecf87c89729e8f2c2beda

    • SHA256

      48ceaeae87eed03ed8a4fb93d2fdf07c6401379114c7fd9581b0afc50407081c

    • SHA512

      8ae9e0aaba0a0dc67814e2875aeda2e36073410140f3417a0d6204a369066c52c9b81a06feda579a2d1e31c16ee21dc67faff263039461dfa8f6589ad27598da

    • SSDEEP

      6144:vOaZsS4DFasluB04DdbHXrW2AmPxSB/lKfwmpjLkBGxmlTK:TZsFDFas+l3a2AYfnjxxM

    Score
    10/10
    systembcpersistencetrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks