Analysis
-
max time kernel
158s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07-10-2023 05:39
General
-
Target
0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557.exe
-
Size
1.0MB
-
MD5
17fc1332bb8885026657c75511954e07
-
SHA1
9ebbd2f605e5d470db176376928b47940afc1565
-
SHA256
0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557
-
SHA512
0c38b4af0630d9d25aadb653aa9923b751852084db41002c3c78f6aa52a9fe77483237161f7f335ed49679e38007807cf6733a015da4c30824c069910e0061c1
-
SSDEEP
24576:fsCTOsw3FBos9fcWKV7lI93TaSUk5wHocSRTIJCHXjqCrD:ftoK4vuy3Tz2IcuTmC3/
Score
10/10
Malware Config
Extracted
Family
systembc
C2
162.33.179.100:443
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557.exe"C:\Users\Admin\AppData\Local\Temp\0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557.exeC:\Users\Admin\AppData\Local\Temp\0229b0ed2674e64d663aadcd2d289315b73b14b43b35101ff4fd69456b7c5557.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
552KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
20KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB