Extracted

• • Target

    046e029c41ac8987649a05e98db75a462e6d42f5f32e871f907036d23ec2d701

  • Size

    212KB

  • MD5

    3645d634e5976620737eaffe304d30a7

  • SHA1

    6b8f47c29a2710a5dee91f61095b71cd3bb65660

  • SHA256

    046e029c41ac8987649a05e98db75a462e6d42f5f32e871f907036d23ec2d701

  • SHA512

    00014b0a0c892718ea66630137639305da6294636598a90dcafcb7d71869bcd5912c8ee531d9265682321859da8ce4466da8a41347ecab069f182b4ae421862d

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1U:cnLh9yn52rpUR5vHuRYpM+

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2behavioral3behavioral4