General

  • Target

    5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447.exe

  • Size

    327KB

  • Sample

    241017-b2vwqsvgke

  • MD5

    1e130ae675b8766e730ac0e8b555c0c1

  • SHA1

    7b872d6799506ecb1a6a69b0b16cf53a70a337be

  • SHA256

    5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447

  • SHA512

    1e38ca35417bd0c52761e492264dfa778af968164cb5b0da9b511542d987f363be6b1dd6514acbf93c5adddd2df83f8190299cb72814c97bf49c141f12123dbf

  • SSDEEP

    3072:7o9Nt/aZaw9/YRGPwK6DyER+3szzE98bq8Ag0FuTR6THf0XuzWmvrFdkKWVjyXFv:72T/e54GPwja34hAOAFW27R6iqFjq

Malware Config

Extracted

Family

systembc

C2

157.20.182.233:443

Targets

    • Target

      5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447.exe

    • Size

      327KB

    • MD5

      1e130ae675b8766e730ac0e8b555c0c1

    • SHA1

      7b872d6799506ecb1a6a69b0b16cf53a70a337be

    • SHA256

      5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447

    • SHA512

      1e38ca35417bd0c52761e492264dfa778af968164cb5b0da9b511542d987f363be6b1dd6514acbf93c5adddd2df83f8190299cb72814c97bf49c141f12123dbf

    • SSDEEP

      3072:7o9Nt/aZaw9/YRGPwK6DyER+3szzE98bq8Ag0FuTR6THf0XuzWmvrFdkKWVjyXFv:72T/e54GPwja34hAOAFW27R6iqFjq

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks