Extracted

• • Target

    cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15.exe

  • Size

    662KB

  • MD5

    d031aae0c4b488067297beb2dc26460f

  • SHA1

    7a2fa90c458468651846532d2876eefc7fe15ea2

  • SHA256

    cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15

  • SHA512

    4c7538977edf03602b9b4c29acf4e428850a46cfd9bb448dbc39277d75b4536977baa3c0f370ec2065a837af49d049be14a0fd936b06955dcfb352d6ce3ab3d0

  • SSDEEP

    12288:GubsNSOetfARQAPyGUu7zhubsNSOetfARQAPyGUfT+tkrnC/bv8:GubsnafAPyjSzhubsnafAPyjZrnEL8

  Score

  10^/10

  systembctrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2