Extracted

• • Target

    273c816d57bb09b14ff288111decf989_JaffaCakes118

  • Size

    237KB

  • MD5

    273c816d57bb09b14ff288111decf989

  • SHA1

    25dd5c1b710b794c0ad4d6a3f7dd17d3a01f28cd

  • SHA256

    142a2de7157729abf8612c21e0adf05cc33e9b6d479b364e2e1d4073b89c110e

  • SHA512

    99d69e94f27577278a2eb79f1bd9fceb25352eef64a4bb09433520491cde430aff2d842214cba34901ae36a93f710e8a6884f16881a7bc88ac0184b767fb167a

  • SSDEEP

    3072:CAscqYX+PWywvu/cMQkCSeXIyZjcW1EOT8TpRg5oXlvDszMVsPHgh:ecfX4EHX7ZhiRVXBaf+

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2