Analysis
- max time kernel
145s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
06/10/2023, 14:12
General
- Target 06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb.exe
- Size 191KB
- Sample231006-rh311aef48
- SHA256 fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb
Score
10/10
Malware Config
Extracted
Family
-
systembc
C2
-
89.187.184.206:4299
-
192.168.1.28:4299
Signatures
- SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
- Adds Run key to start application 2 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb.exe"C:\Users\Admin\AppData\Local\Temp\06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3708-1-0x0000000000950000-0x0000000000A50000-memory.dmp
memory/3708-2-0x0000000000740000-0x0000000000745000-memory.dmp
memory/3708-3-0x0000000000400000-0x00000000005A7000-memory.dmp
memory/3708-5-0x0000000000950000-0x0000000000A50000-memory.dmp
memory/3708-6-0x0000000000740000-0x0000000000745000-memory.dmp