Overview

overview

10

Static

static

7

48514490fa...e0.dll

windows7-x64

10

48514490fa...e0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48514490face0a58cd5ea063e7de28e0.exe

  • Size

    6.4MB

  • Sample

    230804-lg2tnaac99

  • MD5

    48514490face0a58cd5ea063e7de28e0

  • SHA1

    ca52f90d5d6995f68bde1daf3900b3854431a3dd

  • SHA256

    11f88c287b501abb341631221d59ef63089baa83faecbf222c3ba618e5f49456

  • SHA512

    d1fdc7b7420f03dc29b9cd447a1235c34dab75b10b977b0d7cc72b429001a79d588d57f5d91165c4aff349313f6d76016ef44899f50963d3d774a97bfdcf1a48

  • SSDEEP

    196608:NZwmQb62Pk1t+w69MCaSuxu70XSUAFTNknuFkJ:TW62Pk1t+JJuI70CbHe

Score
10/10
systembctrojanvmprotect

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

    • Target

      48514490face0a58cd5ea063e7de28e0.exe

    • Size

      6.4MB

    • MD5

      48514490face0a58cd5ea063e7de28e0

    • SHA1

      ca52f90d5d6995f68bde1daf3900b3854431a3dd

    • SHA256

      11f88c287b501abb341631221d59ef63089baa83faecbf222c3ba618e5f49456

    • SHA512

      d1fdc7b7420f03dc29b9cd447a1235c34dab75b10b977b0d7cc72b429001a79d588d57f5d91165c4aff349313f6d76016ef44899f50963d3d774a97bfdcf1a48

    • SSDEEP

      196608:NZwmQb62Pk1t+w69MCaSuxu70XSUAFTNknuFkJ:TW62Pk1t+JJuI70CbHe

    Score
    10/10
    systembctrojanvmprotect

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Blocklisted process makes network request

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks