Analysis
-
max time kernel
111s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28-08-2024 21:19
General
-
Target
b2eb69d01ec25bb62c356a19085ce3e0N.exe
-
Size
782KB
-
MD5
b2eb69d01ec25bb62c356a19085ce3e0
-
SHA1
69aa9470efcb9651313dd7c09b43a10edd202b97
-
SHA256
ce7b80ccdd02d7df3fd1215e0673cd51ddc80d8acd5e6db4fee856d0b307de42
-
SHA512
3da55cdee9d6ba4f55c19132dbe12d0bc3b53c4f34b41ecaa5a5a6059903a1764cb3bbdbf7bc8710b2151577a423474062daf372b6116223975fa0b4271647e7
-
SSDEEP
12288:hpIdn0wvs3tS+Zn2ocK9hyVDI9snwxrOBd34taZo7Oeci:rcn03bV2or2VkQotaZo7
Score
10/10
Malware Config
Extracted
Family
systembc
C2
185.215.113.32:4000
78.47.64.46:4000
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Drops file in Windows directory 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2eb69d01ec25bb62c356a19085ce3e0N.exe"C:\Users\Admin\AppData\Local\Temp\b2eb69d01ec25bb62c356a19085ce3e0N.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\b2eb69d01ec25bb62c356a19085ce3e0N.exeC:\Users\Admin\AppData\Local\Temp\b2eb69d01ec25bb62c356a19085ce3e0N.exe start1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
4KB
-
Filesize
20KB
-
Filesize
28KB
-
Filesize
4KB
-
Filesize
808KB