Extracted

• • Target

    18bf71b4b6017218464aa69ece567f98_JaffaCakes118

  • Size

    190KB

  • MD5

    18bf71b4b6017218464aa69ece567f98

  • SHA1

    5eab7974b0636568d2b96cf9eef6b6bacb8adb1b

  • SHA256

    a1d22e1aff7b55b24228a8da8851a8a0ee40449941123cccc59b50d8c58215a1

  • SHA512

    5efff60513e55b0961602b2ecdadd04fb8e524e5e4f5dac34bde6a6504a94c6cc8b326a7b947022a9bfea334b67a32aed6282ea4d698da598bc54cf6635a8f74

  • SSDEEP

    3072:XMglNbMGoT2YL/kLPjbPMsLboRjm8LWfAsUZH9VsPHvw:cHh2YL/gjbPMsLborsUZkf4

  Score

  10^/10

  systembctrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2