Analysis
- max time kernel
453s - max time network
454s - platform
windows11-21h2_x64 - resource
win11-20240214-en - resource tags
- submitted
10/04/2024, 03:10
General
- Target a41982f4915a70f246b0d6109280f39b.exe
- Size 209KB
- Sample240410-dpbcnsfg8y
- SHA256 31cdb1024e6010e5a59c0fc509432e6928c4eaf1a42c82e9fbd33e9aac2c552c
Score
10/10
Malware Config
Signatures
- SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a41982f4915a70f246b0d6109280f39b.exe"C:\Users\Admin\AppData\Local\Temp\a41982f4915a70f246b0d6109280f39b.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 2402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4996 -ip 49961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4996-1-0x0000000004720000-0x0000000004820000-memory.dmp
memory/4996-2-0x00000000046A0000-0x00000000046A9000-memory.dmp
memory/4996-3-0x0000000000400000-0x00000000045F0000-memory.dmp