Extracted

• • Target

    7094b9e15f54e0a9619fe6073988ee5c

  • Size

    209KB

  • MD5

    7094b9e15f54e0a9619fe6073988ee5c

  • SHA1

    5cdc7829d5acedb7f1344ff541a2f962f27f5b01

  • SHA256

    cb92d12ebe8e036b9ebd71dcc80f9187c13bd78ad7d6f4076159c053c4cab16f

  • SHA512

    d5b2d1550f9aa60f4d468150f12d57e37b4090e22277f90ed44962995da4815cc6089e0ee2d1af187bf4b51925cab7631a6e87086621c431ea594c82fa578e83

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UF:cnLh9yn52rpUR5vHuRYpM+F

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2behavioral3behavioral4

• • Target

    out.upx

  • Size

    1.0MB

  • MD5

    86b56f37e12c0361800c2dc4a00efaad

  • SHA1

    5a4521d1334b352cfb0abc9ea4c16dba3a683139

  • SHA256

    f55cb3610af39d030231dc72beb53bdfa9f6fe26ff62c72e9af92059ad4b947e

  • SHA512

    e67b7cc98a0fdbcbfa6fc1ece56f8ed25f8bb920e76d1f6bd1e997823220b19ada56a6a99e2e0b60c3ea43053ad4bec9f11b59a8c1cfebae7470a5eff8850a7d

  • SSDEEP

    6144:D9mI/A/bpCQqR5yqL5gbqD8T/ruTEu1U7C711:D9ro/4QqLmqDC/rup+6P

  Score

  3^/10
  behavioral5behavioral6behavioral7behavioral8