Analysis
-
max time kernel
142s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-08-2024 18:13
General
-
Target
autoupdate.dll
-
Size
3.0MB
-
MD5
729527a4e620ce6650b35858f43f4f44
-
SHA1
d01df5fd3edad753fdbbd3a15406f7b9e28e910e
-
SHA256
b57795017364deb0f319fa62c440500882562f6650e651b49058e080cbe8f9a8
-
SHA512
c81ba619a3a74d2fa893b980ac11d2a49d8be2c42617f2cf0a65c04f26e1ae2a088bc2ce40d7c7171adace6e5d92d8eccac04fb6fafea6d9224fe79e1a70a108
-
SSDEEP
49152:ciz0lsT/VMGu3M1AOhVZ1zY0tRJujI340tIsN69EdjXMPr4EClomXSK754zuBLZs:cqzuxk22fvXMTkoP9
Score
10/10
Malware Config
Extracted
Family
systembc
C2
66.85.173.12:443
23.131.216.131:443
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Blocklisted process makes network request 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\autoupdate.dll,#11⤵
- Blocklisted process makes network request
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
-
Filesize
1.6MB
-
Filesize
3.0MB