Extracted

• • Target
    046e029c41ac8987649a05e98db75a462e6d42f5f32e871f907036d23ec2d701
  • Size 212KB
  • SHA256 046e029c41ac8987649a05e98db75a462e6d42f5f32e871f907036d23ec2d701
  • MD5 3645d634e5976620737eaffe304d30a7
  • SHA1 6b8f47c29a2710a5dee91f61095b71cd3bb65660
  • SHA512 00014b0a0c892718ea66630137639305da6294636598a90dcafcb7d71869bcd5912c8ee531d9265682321859da8ce4466da8a41347ecab069f182b4ae421862d
  • SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1U:cnLh9yn52rpUR5vHuRYpM+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2behavioral3behavioral4