Extracted

• • Target

    a131debc6aff9726b63414d02f6cb3b7f2243baff822131f3892247d6799239a

  • Size

    67KB

  • MD5

    2a0f21b38d4ca04c9523407bf1d54e6d

  • SHA1

    3912a07ae6805e8cbcef54b1c1aa1d01e8d8155b

  • SHA256

    a131debc6aff9726b63414d02f6cb3b7f2243baff822131f3892247d6799239a

  • SHA512

    903495df0f2dabb8ea36e3a24b1bdb83ad9fb66198d8cf0c6d92a7bbb01e8ccbeb7f2a10fc88fd659f724df27fbb43413557c510298bc63115dae3fabeac7872

  • SSDEEP

    1536:9Lr3XKmOJRmVdGLuLCikPCROvTJ2nr6B6yKarxw:9LzKmgRmCikaROv06B6Gr

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • UPX dump on OEP (original entry point)

  • Blocklisted process makes network request

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2