systembc | c08ae3fc4f7db6848f829eb7548530e2522ee3eb60a57b2c38cd1bdc862f5d6f | Triage

Resubmissions

18-04-2024 05:27

240418-f5tv3acd72 10

18-04-2024 05:27

240418-f5s9jadf9s 10

18-04-2024 05:27

240418-f5p7wacd66 10

18-04-2024 05:27

240418-f5plcacd64 10

18-04-2024 05:27

240418-f5paksdf8z 10

Analysis

max time kernel
437s
max time network
443s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
18-04-2024 05:27

Sharing

Report Analysis Logs

General

Target

88b7218e0e2ce38dcbb6647aebc1b915.exe
Size

168KB
MD5

88b7218e0e2ce38dcbb6647aebc1b915
SHA1

84359a09ba1025ef5e17521a098aa1a5b27300df
SHA256

c08ae3fc4f7db6848f829eb7548530e2522ee3eb60a57b2c38cd1bdc862f5d6f
SHA512

1976d16421d6085d9588c62712ea31b7bc31abb1f7bf8cae238b700fd5932d0f0aa46675e824201e5a292811c5bd6fe0e91d7b62d39b85e566a45d814255dd66
SSDEEP

3072:GlN7OGtM7vN+Ma/lkphLMzirj6gvzH2Hd81VrX2fMZ:k7OhfCGh4zw1vDE2nB

Score

10^/10

systembc trojan

Malware Config

Signatures

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2856	3476	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\88b7218e0e2ce38dcbb6647aebc1b915.exe
"C:\Users\Admin\AppData\Local\Temp\88b7218e0e2ce38dcbb6647aebc1b915.exe"
1⤵
PID:3476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 280
  2⤵
  - Program crash
  PID:2856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3476 -ip 3476
1⤵
PID:3676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3476-1-0x00000000061E0000-0x00000000062E0000-memory.dmp

Filesize
1024KB

Download
memory/3476-2-0x0000000007CD0000-0x0000000007CD9000-memory.dmp

Filesize
36KB

Download