Overview

overview

10

Static

static

1

NEAS.640ef...23.url

windows7-x64

1

NEAS.640ef...23.url

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    NEAS.640ef9afce45a61a02970462b829bf37a845948c17d72577dc70c1c21aa55b23.url
  • Size 204B
  • Sample231117-t4rafaba85
  • SHA256 640ef9afce45a61a02970462b829bf37a845948c17d72577dc70c1c21aa55b23
  • MD5 SHA1 SHA512
Score
10/10
systembctrojan

Malware Config

Extracted

Family

  • systembc

C2

  • 62.173.140.37:4001

Targets

    • Target
      NEAS.640ef9afce45a61a02970462b829bf37a845948c17d72577dc70c1c21aa55b23.url
    • Size 204B
    • SHA256 640ef9afce45a61a02970462b829bf37a845948c17d72577dc70c1c21aa55b23
    • MD5 SHA1 SHA512
    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks