General

  • Target

    d24d4a54a0e40828860629adfda75b6c5bd5737a518f6440133711ed56df2a22

  • Size

    6KB

  • MD5

    7272b1623ab0b8e5dc74b8adcfcb8f51

  • SHA1

    a2123c662e274ec5e357b77f9012545732a6d65c

  • SHA256

    d24d4a54a0e40828860629adfda75b6c5bd5737a518f6440133711ed56df2a22

  • SHA512

    bef5963c808a518e0e4cc8039db199f304794963f393b8f271bcee14119aa7fd15249fb667c565bdff312e8f1cc2c151b323feb50f6a63620f0342aabb0a18db

  • SSDEEP

    192:KUH0mLFjSHnypx0o/ff0bUhZ8yppe28U9Ys3guG:KUHSeDfswhZ8ySyYYM

Score
10/10

Malware Config

Extracted

Family

systembc

C2

88.214.25.251:41827

192.168.1.28:41827

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d24d4a54a0e40828860629adfda75b6c5bd5737a518f6440133711ed56df2a22
    .zip

    Password: infected

  • 90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671
    .dll windows:5 windows x64 arch:x64

    dbd4201cf48f9c38a17d30012392cf92


    Headers

    Imports

    Exports

    Sections