Overview

overview

10

Static

static

3

odd DLL/au...te.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    odd DLL.7z

  • Size

    1.8MB

  • Sample

    240701-t3dmysselm

  • MD5

    224b67c703e80e58519c23e1506a06d9

  • SHA1

    4436d991ee03fff90098b3b3224d22d562e597d9

  • SHA256

    c86999a3431bdc0555efe34c12b75440929a15a5eeff3d730382dc55b52e3c3c

  • SHA512

    5f1d11020263c03d6897bc62af0add6a77c03459966a362f67fca4241d4fdfdfe4c7c0019f0ae331eee2cdee9d43524b24974d30c008f0e9f8cb5a04cfd30f2d

  • SSDEEP

    49152:hfVQoeefTsLq8R8+BYYj+35/JeT1kEubQm:hfVQrLbRmYjm/JeT1kEiL

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

66.85.173.12:443

23.131.216.131:443

Targets

    • Target

      odd DLL/autoupdate.dll

    • Size

      3.0MB

    • MD5

      729527a4e620ce6650b35858f43f4f44

    • SHA1

      d01df5fd3edad753fdbbd3a15406f7b9e28e910e

    • SHA256

      b57795017364deb0f319fa62c440500882562f6650e651b49058e080cbe8f9a8

    • SHA512

      c81ba619a3a74d2fa893b980ac11d2a49d8be2c42617f2cf0a65c04f26e1ae2a088bc2ce40d7c7171adace6e5d92d8eccac04fb6fafea6d9224fe79e1a70a108

    • SSDEEP

      49152:ciz0lsT/VMGu3M1AOhVZ1zY0tRJujI340tIsN69EdjXMPr4EClomXSK754zuBLZs:cqzuxk22fvXMTkoP9

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks