Extracted

• • Target

    5d57aaeb136d7e63d4a390c0a031f300N.exe

  • Size

    1.0MB

  • MD5

    5d57aaeb136d7e63d4a390c0a031f300

  • SHA1

    91dfc3a88b14597d0834451df07bd4af7716c7b3

  • SHA256

    399d335502736eef61d1377630acc60bc88d5857e13a4500e3175a0a70dd1152

  • SHA512

    b1f1e437e6df82a0429c0c8467b8b221c10284bc423555d2e025224c2e8deb7af468573a9202d599bc914e1b143c841d65178e09d2a0e4fadd1e030a6a92c78c

  • SSDEEP

    6144:X9mI/A/bpCQqR5yqL5pbqD8T/ruThC711qC711f:X9ro/4QqLrqDC/ru8PDPf

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  behavioral1behavioral2