Extracted

• • Target

    3a7327bd54ba0dfa36bbf0b9d0dc820984d6d0e0316cfa4045ab4c1e7e447282.exe

  • Size

    2.2MB

  • MD5

    e817cc929fbc651c5bdab9e8cca0d9d9

  • SHA1

    4d73dc2afcde6a1dcf9417c0120252a2d8fd246f

  • SHA256

    3a7327bd54ba0dfa36bbf0b9d0dc820984d6d0e0316cfa4045ab4c1e7e447282

  • SHA512

    a9c1e547ef74c20e0a21dfc951463fb6883a23da4c323c96c5e64ac5793e774ceae898d4cf486e1bf1ea8fb69360610639a1046005fcdb9bd9f8463aec4a3e2f

  • SSDEEP

    49152:Znv1H6cOicCqvWtLfr1/7IBSWCRBClm7gXKxfsvX7TXL:XHLhbQsV/7bRBClagXnv77

  Score

  10^/10

  systembcpersistencetrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2