Resubmissions
17-04-2024 09:26
240417-lee7waah53 1017-04-2024 09:26
240417-leddaaah47 1017-04-2024 09:26
240417-lec3hsce2w 1017-04-2024 09:26
240417-lecfzsce2v 1017-04-2024 09:26
240417-lebvfsah45 1016-04-2024 13:38
240416-qxqhsada21 10Analysis
-
max time kernel
212s -
max time network
283s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
-
submitted
17-04-2024 09:26
General
-
Target
7c05833514baa8de4f997a7fcb04096316f2fb44d77fcc0951bb50adbf8d58f5.exe
-
Size
1.0MB
-
MD5
0a286d2f6060a92d15ddfd03063a1486
-
SHA1
172ae7b2059b420c463daf8ca58a55d8ab500d5c
-
SHA256
7c05833514baa8de4f997a7fcb04096316f2fb44d77fcc0951bb50adbf8d58f5
-
SHA512
bdcccaf8f7636bb54d74d1a1ead3288234a787c3b6d9c3d96e3584fc520088c97c98130e8fe030a1ee9551376b270f0ee5c6e53dd44581850e73abc9493d4cc7
-
SSDEEP
6144:X9mI/A/bpCQqR5yqL5pbqD8T/ruThC711qC711Q:X9ro/4QqLrqDC/ru8PDPQ
Score
10/10
Malware Config
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c05833514baa8de4f997a7fcb04096316f2fb44d77fcc0951bb50adbf8d58f5.exe"C:\Users\Admin\AppData\Local\Temp\7c05833514baa8de4f997a7fcb04096316f2fb44d77fcc0951bb50adbf8d58f5.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 2402⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5092 -ip 50921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5092-0-0x0000000000400000-0x00000000045E6000-memory.dmpFilesize
65.9MB
-
memory/5092-3-0x00000000047B0000-0x00000000047B9000-memory.dmpFilesize
36KB
-
memory/5092-2-0x0000000004950000-0x0000000004A50000-memory.dmpFilesize
1024KB