Overview

overview

10

Static

static

3

autoupdate.dll

windows7-x64

10

autoupdate.dll

windows10-2004-x64

10

Resubmissions

09-08-2024 18:59

240809-xnehgsvanl 10

09-08-2024 18:13

240809-wt8g3stdrp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    taskdll.zip

  • Size

    1.9MB

  • Sample

    240809-xnehgsvanl

  • MD5

    a9df6c7028b1a4bcd536da4f9256dbc9

  • SHA1

    bf97b5e31f4963c760a23f059787c3f3b49baf69

  • SHA256

    2fee15f797ca4443cbfda12073902ce0bd5e8e270a2e779fb481a6d2ba382809

  • SHA512

    11907dd03380f099611e4e26eae6fbe71f9de4f5ce84182a87dadc635536beb80ec9a312ac64f6be3585c8758a6d4705f047ac9042d085c15a5fdd27219fa1cf

  • SSDEEP

    49152:rPPDBnmhPPEf33fHdV4lyAA6ucRzccGat2zdzMH:bVmhPsf33VVqyAA6uCccVABQH

Score
10/10
systembctrojan

Malware Config

Extracted

Family

systembc

C2

66.85.173.12:443

23.131.216.131:443

Targets

    • Target

      autoupdate.dll

    • Size

      3.0MB

    • MD5

      729527a4e620ce6650b35858f43f4f44

    • SHA1

      d01df5fd3edad753fdbbd3a15406f7b9e28e910e

    • SHA256

      b57795017364deb0f319fa62c440500882562f6650e651b49058e080cbe8f9a8

    • SHA512

      c81ba619a3a74d2fa893b980ac11d2a49d8be2c42617f2cf0a65c04f26e1ae2a088bc2ce40d7c7171adace6e5d92d8eccac04fb6fafea6d9224fe79e1a70a108

    • SSDEEP

      49152:ciz0lsT/VMGu3M1AOhVZ1zY0tRJujI340tIsN69EdjXMPr4EClomXSK754zuBLZs:cqzuxk22fvXMTkoP9

    Score
    10/10
    systembctrojan

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

      trojansystembc

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks