General

  • Target

    62813c6cab9234e83949fcc563c33b57.exe

  • Size

    6.0MB

  • Sample

    230808-matedadd9s

  • MD5

    62813c6cab9234e83949fcc563c33b57

  • SHA1

    474c9abc14fea035d0e80128dbd7260f0cbc42b2

  • SHA256

    b2b82c1977c17aec7ba0074f56c0d61100e616a0ce72dab748ec4269db6c0793

  • SHA512

    a29cdda3218566509cfc3d07b50bfe9ece45fd6a57cb12b649b283204191326e30746bc9d33c63b2e8281b65fd1f19cc79092b81e8cd67d593010c3574986542

  • SSDEEP

    98304:Yk/CgBuUFSDyJ6FqBh2Rvtu9+GdULsSuPbm5u1et8yDD27AadUEpnoj:DBumcyJ6O3LdCgPbSket8yDDTsGj

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Targets

    • Target

      62813c6cab9234e83949fcc563c33b57.exe

    • Size

      6.0MB

    • MD5

      62813c6cab9234e83949fcc563c33b57

    • SHA1

      474c9abc14fea035d0e80128dbd7260f0cbc42b2

    • SHA256

      b2b82c1977c17aec7ba0074f56c0d61100e616a0ce72dab748ec4269db6c0793

    • SHA512

      a29cdda3218566509cfc3d07b50bfe9ece45fd6a57cb12b649b283204191326e30746bc9d33c63b2e8281b65fd1f19cc79092b81e8cd67d593010c3574986542

    • SSDEEP

      98304:Yk/CgBuUFSDyJ6FqBh2Rvtu9+GdULsSuPbm5u1et8yDD27AadUEpnoj:DBumcyJ6O3LdCgPbSket8yDDTsGj

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Blocklisted process makes network request

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix

Tasks