Extracted

• • Target

    6cc414140f13caf6ab67abd78c488ac0N.exe

  • Size

    243KB

  • MD5

    6cc414140f13caf6ab67abd78c488ac0

  • SHA1

    d90819c58bac99abdc37e394597acdef85dd36c4

  • SHA256

    9b2d89057155cd1cec731e83a0946cf95772134f0069da737fa30935b5a9b325

  • SHA512

    75133bf1e666e17d3d18e4953b8e62bcb87454157102f1825ba972feec0801901fa4bdaa0ba88823839ad7422622e274a39c4a183c4a0a7f00a8432be02e77db

  • SSDEEP

    1536:oju9HIaQrom6hbDAdqGpdMJ2x5f/h81lM5nB7OcIGGjz5NTJ1zc4aZGCq2iW7z:ojMHIPSbx7+8n4gc1Gn5N91dOGCH

  Score

  10^/10

  systembcaspackv2discoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2