Extracted

• • Target

    88b7218e0e2ce38dcbb6647aebc1b915_JaffaCakes118

  • Size

    168KB

  • MD5

    88b7218e0e2ce38dcbb6647aebc1b915

  • SHA1

    84359a09ba1025ef5e17521a098aa1a5b27300df

  • SHA256

    c08ae3fc4f7db6848f829eb7548530e2522ee3eb60a57b2c38cd1bdc862f5d6f

  • SHA512

    1976d16421d6085d9588c62712ea31b7bc31abb1f7bf8cae238b700fd5932d0f0aa46675e824201e5a292811c5bd6fe0e91d7b62d39b85e566a45d814255dd66

  • SSDEEP

    3072:GlN7OGtM7vN+Ma/lkphLMzirj6gvzH2Hd81VrX2fMZ:k7OhfCGh4zw1vDE2nB

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2