General

  • Target

    44d91bcc9c29ea92d933095d707a0040e39b08d1c52099014d58eceecbbe3ace.zip

  • Size

    6KB

  • MD5

    ac7cb117b8c3533d1783641effde52d8

  • SHA1

    542664a51946fdaafa384a45f61f9625098e15e7

  • SHA256

    0098751fd6bfe3f27303b80ade1d7963c45cb93347583cb7fdd068e633d774a3

  • SHA512

    a47a4017ba83362e93f35a22ab06800ae137900e2437c33207dadeeab9ed64c6c8065e3ede95a838045932741007af6c614115c02dfb95ae2b9935f95a2ae076

  • SSDEEP

    96:cRhHcwhXypHKYZ6jHY3vK5f1MGEfwRJ3xDO1DaVh0bGp4AZylc0c3tLqnJoRF:VwhXtMycynuuBSsVh2Gp49KenJy

Score
10/10

Malware Config

Extracted

Family

systembc

C2

65.21.119.52:4277

localhost.exchange:4277

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44d91bcc9c29ea92d933095d707a0040e39b08d1c52099014d58eceecbbe3ace.zip
    .zip

    Password: infected

  • 44d91bcc9c29ea92d933095d707a0040e39b08d1c52099014d58eceecbbe3ace.exe
    .dll windows x64

    Password: infected

    9d40dd67bb6cfbfeb09c141d693f05f0


    Headers

    Imports

    Exports

    Sections