Resubmissions
17-04-2024 12:47
240417-p1aq3ahc4w 1017-04-2024 12:47
240417-pz95jafg23 1017-04-2024 12:47
240417-pz9h1afg22 1017-04-2024 12:46
240417-pz56ksff97 1017-04-2024 12:46
240417-pz49aahc3t 1017-04-2024 06:16
240417-g1qhhsff94 10Analysis
-
max time kernel
1451s -
max time network
1508s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
-
submitted
17-04-2024 12:47
General
-
Target
09800c68e162c77868d7f4bf14cf89b63d4c3e62a3da81a21455633f469ffcdc.exe
-
Size
221KB
-
MD5
364d59e179ebcd469dce4f231789732d
-
SHA1
bc86ba43147fe0d301a32b66193dd2930b8af1d2
-
SHA256
09800c68e162c77868d7f4bf14cf89b63d4c3e62a3da81a21455633f469ffcdc
-
SHA512
92ae882cb803b23dc344a42b07ffcc77999f71dcd6b7bf1d2ca7e7306a7642543a2cc85f2bdf18df67151a8b2145509363b2552d4e5361715bc55b934db046fe
-
SSDEEP
6144:0YlvDFWQtzoa2gUayZSSnBcaa5MKmtVgykK:BNtzPqUgkNM4
Score
10/10
Malware Config
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\09800c68e162c77868d7f4bf14cf89b63d4c3e62a3da81a21455633f469ffcdc.exe"C:\Users\Admin\AppData\Local\Temp\09800c68e162c77868d7f4bf14cf89b63d4c3e62a3da81a21455633f469ffcdc.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3668 -s 2922⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3668 -ip 36681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3668-0-0x0000000004D70000-0x0000000004D76000-memory.dmpFilesize
24KB
-
memory/3668-1-0x0000000004D80000-0x0000000004D89000-memory.dmpFilesize
36KB
-
memory/3668-2-0x0000000000400000-0x0000000004C6C000-memory.dmpFilesize
72.4MB