Extracted

• • Target

    0c8b34c07778881cebf9920eb8e7bb6f_JaffaCakes118

  • Size

    209KB

  • MD5

    0c8b34c07778881cebf9920eb8e7bb6f

  • SHA1

    938dc8ae3f464fed4cf1e2aa1ab7a149d98d5b6f

  • SHA256

    cc9213a0f464e2c554fea9927fc04380a0e6056a6bd97a492f7be0260899e1e7

  • SHA512

    1ff7e7146c5e458e7263e1f5c4a6c1c4e7ce9bcca6d0df36abf383e38b31fbd49e2156e7574954a8e670927cb45dd927e6f272b20029ad4f64ced20802399bc0

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UE:cnLh9yn52rpUR5vHuRYpM+E

  Score

  10^/10

  systembcdiscoverytrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Uses Tor communications

    Malware can proxy its traffic through Tor for more anonymity.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2