Extracted

• • Target

    4307ea6dc3759c609a950c11763ebe3e

  • Size

    209KB

  • MD5

    4307ea6dc3759c609a950c11763ebe3e

  • SHA1

    dbfe522524e2157b62939e11fba0caea4b5758eb

  • SHA256

    7582fd4ed2e0b92d254962953083d90b3324d41a3a81ff30f146af4b3ae4e442

  • SHA512

    2afc23f09d5369fb036b8f8e831019ba6dd309d49662d9a8e85322bdd9d1c33e349454f2ba86621b01469efe3175ed9d38612691e34d6862f98d469281ca19a9

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1U6:cnLh9yn52rpUR5vHuRYpM+6

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2behavioral3behavioral4