systembc | c08ae3fc4f7db6848f829eb7548530e2522ee3eb60a57b2c38cd1bdc862f5d6f | Triage

Resubmissions

18-04-2024 05:27

240418-f5tv3acd72 10

18-04-2024 05:27

240418-f5s9jadf9s 10

18-04-2024 05:27

240418-f5p7wacd66 10

18-04-2024 05:27

240418-f5plcacd64 10

18-04-2024 05:27

240418-f5paksdf8z 10

Analysis

max time kernel
209s
max time network
284s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
18-04-2024 05:27

Sharing

Report Analysis Logs

General

Target

88b7218e0e2ce38dcbb6647aebc1b915.exe
Size

168KB
MD5

88b7218e0e2ce38dcbb6647aebc1b915
SHA1

84359a09ba1025ef5e17521a098aa1a5b27300df
SHA256

c08ae3fc4f7db6848f829eb7548530e2522ee3eb60a57b2c38cd1bdc862f5d6f
SHA512

1976d16421d6085d9588c62712ea31b7bc31abb1f7bf8cae238b700fd5932d0f0aa46675e824201e5a292811c5bd6fe0e91d7b62d39b85e566a45d814255dd66
SSDEEP

3072:GlN7OGtM7vN+Ma/lkphLMzirj6gvzH2Hd81VrX2fMZ:k7OhfCGh4zw1vDE2nB

Score

10^/10

systembc trojan

Malware Config

Signatures

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3576 1956 WerFault.exe 88b7218e0e2ce38dcbb6647aebc1b915.exe

C:\Users\Admin\AppData\Local\Temp\88b7218e0e2ce38dcbb6647aebc1b915.exe
"C:\Users\Admin\AppData\Local\Temp\88b7218e0e2ce38dcbb6647aebc1b915.exe"
1⤵
PID:1956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 272
2⤵
- Program crash
PID:3576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1956 -ip 1956
1⤵
PID:1772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-1-0x0000000006150000-0x0000000006250000-memory.dmp

Filesize
1024KB

Download
memory/1956-2-0x0000000007E10000-0x0000000007E19000-memory.dmp

Filesize
36KB

Download