Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2023, 17:56

General

  • Target

    07102023_0156_246cbf813e7b9436404dafbeb74647098f74a7c7159a24221f01030e3fbceff1.exe

  • Size

    284KB

  • MD5

    8e8cc48e57ee82729cefb0123889b0a1

  • SHA1

    bf28dea9cc985b46a14bef73e26efc8c0dd0cb8a

  • SHA256

    246cbf813e7b9436404dafbeb74647098f74a7c7159a24221f01030e3fbceff1

  • SHA512

    26ee546639e29b051dd2234a74c6f33479901bfc3a51ff9f948404f33cc5e06a3d32690032ca7feb59c03f64db1dc47cde5080f2fa39c9e6837a109be5c78aab

  • SSDEEP

    3072:c7JXPazIrBbEL/rrvWgB55+xMyRNIJ8ml9Rg3o46PjNqgGpdtsAvw:c7J/YL/rrvdB+MoTQo3R2sVvw

Score
10/10

Malware Config

Extracted

Family

systembc

C2

144.76.223.74:443

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

Processes

  • C:\Users\Admin\AppData\Local\Temp\07102023_0156_246cbf813e7b9436404dafbeb74647098f74a7c7159a24221f01030e3fbceff1.exe
    "C:\Users\Admin\AppData\Local\Temp\07102023_0156_246cbf813e7b9436404dafbeb74647098f74a7c7159a24221f01030e3fbceff1.exe"
    1⤵
      PID:1196

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1196-2-0x0000000000400000-0x00000000004C8000-memory.dmp

            Filesize

            800KB

          • memory/1196-3-0x0000000000220000-0x0000000000223000-memory.dmp

            Filesize

            12KB

          • memory/1196-1-0x00000000005F0000-0x00000000006F0000-memory.dmp

            Filesize

            1024KB

          • memory/1196-5-0x00000000005F0000-0x00000000006F0000-memory.dmp

            Filesize

            1024KB