General

  • Target

    2024-05-11_d318f25547d3cdaf209dd45b14c5855d_magniber

  • Size

    1.4MB

  • Sample

    240511-fr3aaahf43

  • MD5

    d318f25547d3cdaf209dd45b14c5855d

  • SHA1

    3093bf535d66cae1327913b67dee5223617fa68c

  • SHA256

    1fb4df5da69b4e5dacac7a63c8cc4ba10f3f0a42f588d024b9523e6888b9c730

  • SHA512

    89a2c1faaaeb2283ed98b2c5ac2dabc3c5405a9d303ad1bade4c1fc796be9e071ca0486463fe1846e7237f90090f9f36ec66282075d8ca40dc686d3a618a4196

  • SSDEEP

    24576:2ORjoWYMEiBgszlf8UzYXl0P36P2D0TCO0N1wQOGlyhj/DgHItdnPl1zoxYbwh8U:jRjoWYMzNSU8V0SVzIWGlyhrdtdnPl1Y

Malware Config

Extracted

Family

systembc

C2

sunnywinter.cloud:12814

Targets

    • Target

      2024-05-11_d318f25547d3cdaf209dd45b14c5855d_magniber

    • Size

      1.4MB

    • MD5

      d318f25547d3cdaf209dd45b14c5855d

    • SHA1

      3093bf535d66cae1327913b67dee5223617fa68c

    • SHA256

      1fb4df5da69b4e5dacac7a63c8cc4ba10f3f0a42f588d024b9523e6888b9c730

    • SHA512

      89a2c1faaaeb2283ed98b2c5ac2dabc3c5405a9d303ad1bade4c1fc796be9e071ca0486463fe1846e7237f90090f9f36ec66282075d8ca40dc686d3a618a4196

    • SSDEEP

      24576:2ORjoWYMEiBgszlf8UzYXl0P36P2D0TCO0N1wQOGlyhj/DgHItdnPl1zoxYbwh8U:jRjoWYMzNSU8V0SVzIWGlyhrdtdnPl1Y

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks