Extracted

• • Target

    69b22d283fd4a6ce1c9f69f610449b016fdbb7ac1f8c23e199b3c72d7f75c61d.exe

  • Size

    240KB

  • MD5

    9ad0e9c3ba18150e9bb1176cd3cc5cfb

  • SHA1

    ca69a444c9bdb2b80411cd9ba8a3be06a87053c2

  • SHA256

    69b22d283fd4a6ce1c9f69f610449b016fdbb7ac1f8c23e199b3c72d7f75c61d

  • SHA512

    78af683bfb37d139a1cb3e3050b1a7075443197fec209d376aafdaa0694590de1a9103dd82725649dd4b35d7485e5b7a92f74d59a531ebe06fef513e15f3650b

  • SSDEEP

    1536:YzlKjIgWITA+dAGkDEQqrj0OzgFx3wyU0SyvmQm3ZH459VSypXoDzjD7GCq2iW7z:OlKjIbAUFzU0Scm13259VSypXAv/GCH

  Score

  10^/10

  systembcaspackv2discoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2