systembc | fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47 | Triage

Sharing

General

Target

fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe
Size

2.1MB
Sample

241017-c25lls1frl
MD5

68595e9cc8f567681f458a1402b8ebba
SHA1

765072c8ce12e83db831baf20ea46151967c9327
SHA256

fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47
SHA512

1d3b58c99f6df476c8601b33a36873d2a8d178dcc5447dd41f369175ac2b1b09005fbce159cdf1ebce6df4ab41727003c24cb25229718fe09126d0f58d475280
SSDEEP

49152:Zs8boAvk/rdETXD/j6qYMtnz8xvMOjyPNerGSbR7Wtg2l3Zjpdc9iO:ZNboAurdEPjfzSb1WtZt

Score

10^/10

systembc discovery trojan

Malware Config

Extracted

Family

systembc

C2

157.20.182.233:443

Targets

- Target
  
  fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe
- Size
  
  2.1MB
- MD5
  
  68595e9cc8f567681f458a1402b8ebba
- SHA1
  
  765072c8ce12e83db831baf20ea46151967c9327
- SHA256
  
  fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47
- SHA512
  
  1d3b58c99f6df476c8601b33a36873d2a8d178dcc5447dd41f369175ac2b1b09005fbce159cdf1ebce6df4ab41727003c24cb25229718fe09126d0f58d475280
- SSDEEP
  
  49152:Zs8boAvk/rdETXD/j6qYMtnz8xvMOjyPNerGSbR7Wtg2l3Zjpdc9iO:ZNboAurdEPjfzSb1WtZt
Score

10^/10

systembc discovery trojan
- SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

systembcdiscoverytrojan

behavioral2

systembcdiscoverytrojan