Resubmissions
18-04-2024 11:08
240418-m8wmdsbc27 1018-04-2024 11:08
240418-m8na1sce4v 1018-04-2024 11:08
240418-m8mpgsbc24 1018-04-2024 11:08
240418-m8lgesce31 1018-04-2024 11:08
240418-m8kvwsbc23 1018-04-2024 09:41
240418-lnzmwahd29 10Analysis
-
max time kernel
300s -
max time network
205s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
-
submitted
18-04-2024 09:41
General
-
Target
2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9.exe
-
Size
209KB
-
MD5
8e9ddb099e71555326413d9a3a930584
-
SHA1
96350dae3f42d37341b3da7410aabe5c42384156
-
SHA256
2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9
-
SHA512
8d34f32ee48e3d399e020ba3ab4eeab9f1fbdb55a4a5b61b120280975990058221c75be001d09b4f804400977bb769e9ba1fdbd68e90f7db97bd78a69001f09c
-
SSDEEP
6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ux:cnLh9yn52rpUR5vHuRYpM+x
Score
10/10
Malware Config
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9.exe"C:\Users\Admin\AppData\Local\Temp\2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4932 -s 2442⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4932 -ip 49321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
1024KB
-
Filesize
65.9MB