General

  • Target

    file.exe

  • Size

    662KB

  • Sample

    240516-zgzk7afe3x

  • MD5

    d031aae0c4b488067297beb2dc26460f

  • SHA1

    7a2fa90c458468651846532d2876eefc7fe15ea2

  • SHA256

    cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15

  • SHA512

    4c7538977edf03602b9b4c29acf4e428850a46cfd9bb448dbc39277d75b4536977baa3c0f370ec2065a837af49d049be14a0fd936b06955dcfb352d6ce3ab3d0

  • SSDEEP

    12288:GubsNSOetfARQAPyGUu7zhubsNSOetfARQAPyGUfT+tkrnC/bv8:GubsnafAPyjSzhubsnafAPyjZrnEL8

Score
10/10

Malware Config

Extracted

Family

systembc

C2

cobusabobus.cam:4001

Targets

    • Target

      file.exe

    • Size

      662KB

    • MD5

      d031aae0c4b488067297beb2dc26460f

    • SHA1

      7a2fa90c458468651846532d2876eefc7fe15ea2

    • SHA256

      cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15

    • SHA512

      4c7538977edf03602b9b4c29acf4e428850a46cfd9bb448dbc39277d75b4536977baa3c0f370ec2065a837af49d049be14a0fd936b06955dcfb352d6ce3ab3d0

    • SSDEEP

      12288:GubsNSOetfARQAPyGUu7zhubsNSOetfARQAPyGUfT+tkrnC/bv8:GubsnafAPyjSzhubsnafAPyjZrnEL8

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks