systembc | 64cee0326d7fd3ee0741a789d2b92d0b35debd83c321855e3dcc7875ed1d1eab

Analysis

max time kernel
140s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 04:51

Target
45048877f5a11bf5d867ac5a8ab503356aeeb46e30a7c9e54e1e28004c288a34.exe
Size 1021KB
Sample240531-fg34tsgf76
SHA256 45048877f5a11bf5d867ac5a8ab503356aeeb46e30a7c9e54e1e28004c288a34
MD5 995710596451478545b9113bfd75a219
SHA1 44397a09cb8838349bb2eee0b2330ef47874039e
SHA512 257fe369d3bc397c326003813fac107a4adbd615a00c297e120de86aed0d49b05c9af9c0ba3f66c1c38108e47732c80d63e0d96d7c8bc7b2105f5db51d727294
SSDEEP 12288:UiTETjuQkaRUHEMuDZ+Haby+/RjnbpEw1P4YZZEepD/H27+Bl2e5bjYcqn6MgWA0:cjukpdpEaAY3lpD/27Ul2afYc+6Mgg+M
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

systembc trojan

Family

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc

C:\Users\Admin\AppData\Local\Temp\45048877f5a11bf5d867ac5a8ab503356aeeb46e30a7c9e54e1e28004c288a34.exe
"C:\Users\Admin\AppData\Local\Temp\45048877f5a11bf5d867ac5a8ab503356aeeb46e30a7c9e54e1e28004c288a34.exe"
1⤵
PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3844 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:380

memory/2916-0-0x00000000006E0000-0x00000000006E8000-memory.dmp

Download

memory/2916-1-0x00000000006F0000-0x00000000006F6000-memory.dmp

Download