Extracted

• • Target
    4307ea6dc3759c609a950c11763ebe3e
  • Size 209KB
  • SHA256 7582fd4ed2e0b92d254962953083d90b3324d41a3a81ff30f146af4b3ae4e442
  • MD5 4307ea6dc3759c609a950c11763ebe3e
  • SHA1 dbfe522524e2157b62939e11fba0caea4b5758eb
  • SHA512 2afc23f09d5369fb036b8f8e831019ba6dd309d49662d9a8e85322bdd9d1c33e349454f2ba86621b01469efe3175ed9d38612691e34d6862f98d469281ca19a9
  • SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1U6:cnLh9yn52rpUR5vHuRYpM+6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2