systembc | 7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541 | Triage

Submit
Reports

Overview

overview

Static

static

7

dridex

windows10-2004-x64

Sharing

General

Target

7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541
Size

5.9MB
Sample

230805-x1qfhsea29
MD5

23a665ea419877ed603914b0b1e3a319
SHA1

9e44955c216d2b78176476c512d9a7c155734c2a
SHA256

7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541
SHA512

11dbfb00adb1af27b2bb12cdb1fff63c8ffc1b9a860e26a05640fff44d18d862ed7f3961a4a7c7f63619da2c31372fc15432f020e22d03e1c9e366b5cda529ae
SSDEEP

98304:jKtUG8/JhKWuQOGZhGPB1lAiEKU7IHA7wayKz63OTP10tUzxCaIcnnj:jKtUXBkKna51llEvejJWoahzMHc

Score

10^/10

systembc trojan vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541.dll

Resource

win10v2004-20230703-en

systembc trojan vmprotect

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

- Target
  
  7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541
- Size
  
  5.9MB
- MD5
  
  23a665ea419877ed603914b0b1e3a319
- SHA1
  
  9e44955c216d2b78176476c512d9a7c155734c2a
- SHA256
  
  7ed9f4f6c6f6919e85b0f7b46ab95b356ca7702a1a3d415124753b4c77b12541
- SHA512
  
  11dbfb00adb1af27b2bb12cdb1fff63c8ffc1b9a860e26a05640fff44d18d862ed7f3961a4a7c7f63619da2c31372fc15432f020e22d03e1c9e366b5cda529ae
- SSDEEP
  
  98304:jKtUG8/JhKWuQOGZhGPB1lAiEKU7IHA7wayKz63OTP10tUzxCaIcnnj:jKtUXBkKna51llEvejJWoahzMHc
Score

10^/10

systembc trojan vmprotect
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Blocklisted process makes network request
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

systembctrojanvmprotect

© 2018-2024

Terms | Privacy