Extracted

• • Target

    92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

  • Size

    90KB

  • MD5

    92dbe3d237c0b38a6feaece08bf7a1f6

  • SHA1

    5eeda1c31858de743f8afa7ce6c24c8c0e816c7d

  • SHA256

    67713ae5aac48a69c97bcb8dbc6db59518a3b7c60ce57ab48c1883bd995bf7d4

  • SHA512

    fe5f35f485dc2a675374c2581ea8a0bb92f88ef43d225e0f53d57bed6587fd73a8554cd946af252f1557e3e8573c00c43929c31e9e32258aae2b49e538c6494d

  • SSDEEP

    1536:YyXUR8CPCrDfDpmk5C7hWmMv1CoAuBFYDlXq6RTm:5XUta7ptgC1CCE66R

  Score

  10^/10

  systembctrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2