Extracted

• • Target

    e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d.exe

  • Size

    247KB

  • MD5

    e80a1d9a248c337a5d95f09776c0b092

  • SHA1

    4585f99e00ce0068f9a40893b4741b5151066173

  • SHA256

    e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d

  • SHA512

    3c42c682236638a61d3ec6323fc633eb92eab9118e589ab012d407231069b974232d36bfa823dce6f9d24e618cd68fc9ac95b541966d6a4562a3d40b3dc5c04a

  • SSDEEP

    3072:xrRbOKH6aSZYEGhm0OWh5bSpEC2lrGCH:x1OWSZYlOWfSpENo

  Score

  10^/10

  systembcaspackv2discoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2