Extracted

• • Target

    cb4c8e994d30dc8adbedf2c9535b5d04_JaffaCakes118

  • Size

    134KB

  • MD5

    cb4c8e994d30dc8adbedf2c9535b5d04

  • SHA1

    5b317b7b97373d0318ffd3d75487364ab6233778

  • SHA256

    e2de727848662e010f6aa73d623524647cb44822ea96e1817adf9121745fb8a3

  • SHA512

    f9f0ef2357350d07743ffa85bd55ae714cb40a81350c8795742aa57b0a077a6963ff41a5cc928f2b93a3eb930ce37f5d29401677fb7bd1c7a98de96018b45865

  • SSDEEP

    3072:xuPON9on8IhFt5PUk4rdbSxbzU3AyOmp:YPON9oXp4rdbIm

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2