General

  • Target

    13116607249.zip

  • Size

    122KB

  • Sample

    231122-sbzknsdg51

  • MD5

    7fd7e9993a4812028cbb43839207f3ac

  • SHA1

    2755b6196d409365984d2e7017cbfbb4fbe9ab20

  • SHA256

    771bdbc3f8acd04f59cee274643d4f115aeca0575b070aaf67698dbd90d7a29a

  • SHA512

    aaf6c178326fcf459468109ccce05638e870d11402f8736e4a1084412dceebcd8542543005703e54500ab44f92ae0aab1a4f65ec8e9c1967233aef59ae20f18b

  • SSDEEP

    3072:tGOSbqAyZc9DFDJYfh6HWufxC9Mcm/9CIETBHoa:tI3y29JskfxC9/m/UHoa

Score
10/10

Malware Config

Extracted

Family

systembc

C2

45.63.66.10:443

Targets

    • Target

      95357abd84854c615bf87a93312ebdae6c9c5ea0f6e4103e537535b0f204c08b

    • Size

      219KB

    • MD5

      9485be02b5a5edb57665cabdcf53b0a4

    • SHA1

      373f54a7d2d7098a0be89af463d82d496b6612df

    • SHA256

      95357abd84854c615bf87a93312ebdae6c9c5ea0f6e4103e537535b0f204c08b

    • SHA512

      44ab01ce9529f2c85be9f8fd01ef8f66463596a020d5bb5036169be45b06568b1d1f600fc9fe00a654e781283c3b3eedcdfa40ff98a68884143de4da00c0b1f3

    • SSDEEP

      3072:i0EUEDB4BgEqaKOLFoonhHcyWgGKb/fMT2JYhJlC3upskOuyPoccIPS3tMHZ7Nah:uUEeK5aTLF7cBK8FsPuyPdxiMHPzXO

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks