General

  • Target

    e13f7cea04b3dacdca15e10bdee19e52b0f0bee02ed6a32971d92d1089ff49e5

  • Size

    3.6MB

  • Sample

    240327-kkwalsbf4v

  • MD5

    6126caae98c0bd184795252a5be21fe6

  • SHA1

    d53a57e4062f7f354da85e0d27d69244ce7dd445

  • SHA256

    e13f7cea04b3dacdca15e10bdee19e52b0f0bee02ed6a32971d92d1089ff49e5

  • SHA512

    6b62dd3bf9471a75c4b2fb2e7988fb5a899d5be053764ec020bd737b535615762aa2ed22fe8382be0be53bbf0928779b304293886be69877f56dd8a2a03c179b

  • SSDEEP

    98304:pWAxd9ZjLdg8JSgxqqQNtb2ofPXAeFLOAkGkzdnEVomFHKnP4:pHhjL2eofPXJFLOyomFHKnP4

Malware Config

Extracted

Family

systembc

C2

sunnywinter.cloud:12814

Targets

    • Target

      e13f7cea04b3dacdca15e10bdee19e52b0f0bee02ed6a32971d92d1089ff49e5

    • Size

      3.6MB

    • MD5

      6126caae98c0bd184795252a5be21fe6

    • SHA1

      d53a57e4062f7f354da85e0d27d69244ce7dd445

    • SHA256

      e13f7cea04b3dacdca15e10bdee19e52b0f0bee02ed6a32971d92d1089ff49e5

    • SHA512

      6b62dd3bf9471a75c4b2fb2e7988fb5a899d5be053764ec020bd737b535615762aa2ed22fe8382be0be53bbf0928779b304293886be69877f56dd8a2a03c179b

    • SSDEEP

      98304:pWAxd9ZjLdg8JSgxqqQNtb2ofPXAeFLOAkGkzdnEVomFHKnP4:pHhjL2eofPXJFLOyomFHKnP4

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks