General

  • Target

    0x0006000000015679-49.dat

  • Size

    16KB

  • Sample

    240519-swqs9sda8z

  • MD5

    4f01c3d7439dde153ff0110a26e2a71c

  • SHA1

    40d7203ad4e1fd40e13a56e6f747ee480740873c

  • SHA256

    cfb1fd0adf528fcf14647cf3fcd85fb7e4fddd2167b36f9e8b2424b62453df28

  • SHA512

    513d09b80e1ac80813bc691e71cdf5348478157350e43b9daed27741b7f5a7a16b2ae4d88ee9951395747c7f2a93ff0c1f2c3753a9e3bad2e2607767a1e3d28e

  • SSDEEP

    384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V

Score
10/10

Malware Config

Extracted

Family

systembc

C2

cobusabobus.cam:4001

Targets

    • Target

      0x0006000000015679-49.dat

    • Size

      16KB

    • MD5

      4f01c3d7439dde153ff0110a26e2a71c

    • SHA1

      40d7203ad4e1fd40e13a56e6f747ee480740873c

    • SHA256

      cfb1fd0adf528fcf14647cf3fcd85fb7e4fddd2167b36f9e8b2424b62453df28

    • SHA512

      513d09b80e1ac80813bc691e71cdf5348478157350e43b9daed27741b7f5a7a16b2ae4d88ee9951395747c7f2a93ff0c1f2c3753a9e3bad2e2607767a1e3d28e

    • SSDEEP

      384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks