Extracted

• • Target

    62813c6cab9234e83949fcc563c33b57.exe

  • Size

    6.0MB

  • MD5

    62813c6cab9234e83949fcc563c33b57

  • SHA1

    474c9abc14fea035d0e80128dbd7260f0cbc42b2

  • SHA256

    b2b82c1977c17aec7ba0074f56c0d61100e616a0ce72dab748ec4269db6c0793

  • SHA512

    a29cdda3218566509cfc3d07b50bfe9ece45fd6a57cb12b649b283204191326e30746bc9d33c63b2e8281b65fd1f19cc79092b81e8cd67d593010c3574986542

  • SSDEEP

    98304:Yk/CgBuUFSDyJ6FqBh2Rvtu9+GdULsSuPbm5u1et8yDD27AadUEpnoj:DBumcyJ6O3LdCgPbSket8yDDTsGj

  Score

  10^/10

  systembctrojanvmprotect

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Blocklisted process makes network request

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2