Extracted

• • Target

    4eeea01de3c07cbe3ad9cd218f16b458_JaffaCakes118

  • Size

    209KB

  • MD5

    4eeea01de3c07cbe3ad9cd218f16b458

  • SHA1

    e02029f8e603d712eec2b48f8a9396731b99dbb4

  • SHA256

    930c0ff32c41f73eed59507b1e7ab70cd77469406c3a0401b625f70adc6a4fcd

  • SHA512

    6dff35d5fe63d0dd1ec20b47d331749d3cb247380ab5e9e5c30dd2b5561891c82f541991246c9996a4be4be2fe1eeb08cb88c3a3abdd586724187d6b98ea77c3

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UN:cnLh9yn52rpUR5vHuRYpM+N

  Score

  10^/10

  systembctrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2