Extracted

• • Target

    3bc9a13ed11a0da691a2b97ddd52168dbead463fd5371916a1d574184c422a3c

  • Size

    5.8MB

  • MD5

    7b20822375127aaf2c2ec9d1f07a3007

  • SHA1

    c6cc2246cb5fd04ea80c1256ceec10268b876a89

  • SHA256

    3bc9a13ed11a0da691a2b97ddd52168dbead463fd5371916a1d574184c422a3c

  • SHA512

    e7a843db7276164ea677ee04efcd35c2bc1c47b5c7916d32cdd2c1cf372b00b8541716875675afd56ad19536dd9f990050c4fdc5ea9c78d09476700310912f07

  • SSDEEP

    98304:emB1kJ62BWOtIR7AzNS3mVmh/sxWruL0UUXoiEjCQYSRyEK0Upg328Vu2L8IooE:ekKI2BFBS3m0h/P/S2QYwyE13l4w5o

  Score

  10^/10

  systembctrojanvmprotect

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Blocklisted process makes network request

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2