systembc | e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699

Analysis

max time kernel
90s
max time network
190s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
16/04/2024, 10:48

Target
e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699.exe
Size 231KB
Sample240416-mv5cdage74
SHA256 e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699
MD5 af6ec9ed07c5baa331323c30f874070a
SHA1 557507d8fe64a451c56c1daa4973944b3c4470fc
SHA512 d22727886e4532edb35aaaddd7de88d858028d9b4a0d13423934759c23f4a984e269e746a069682d23ed9f5cae575193df2c619465b699fd775152053c52defe
SSDEEP 1536:00Bcg8P5RRugGczhDKkfZ/6tZdiQtmuzbSC7axvUX0I5eT4XpN2B:06cWgn/6liqmuKpq5eT4P2B
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

systembc trojan

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4332	4784	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699.exe
"C:\Users\Admin\AppData\Local\Temp\e4eeae87c2a1322dcca0411cb644fc416d3423d9236b3a94408214315d2a6699.exe"
1⤵
PID:4784
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4784 -s 236
  2⤵
  - Program crash
  PID:4332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4784 -ip 4784
1⤵
PID:4916

memory/4784-1-0x00000000006B0000-0x00000000007B0000-memory.dmp

Download

memory/4784-2-0x0000000000690000-0x0000000000699000-memory.dmp

Download