Extracted

• • Target

    055bb90b6b1355dfbd03fc77826720e14b37934a078fa1caa1ef0e47e04a99e8.exe

  • Size

    246KB

  • MD5

    97a3d3bbbf620a1eead18626beef0932

  • SHA1

    52a1b750a8bb5b64e153179e090f95c69bd340b8

  • SHA256

    055bb90b6b1355dfbd03fc77826720e14b37934a078fa1caa1ef0e47e04a99e8

  • SHA512

    cf5b5a215c7e2ac16306a3f3737d9c7a57c87e8cbe92299e947cf734a8379a23f18b8a43058d359b10e1aa7597f141e54862d6980186d1614902b803c233385d

  • SSDEEP

    3072:1+m9ZYH0gOSr9fM9pXF57/VQ9LZjfnGCH:sSSOj99/GLpe

  Score

  10^/10

  systembcaspackv2discoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2