Analysis
-
max time kernel
138s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-10-2024 02:35
General
-
Target
fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe
-
Size
2.1MB
-
MD5
68595e9cc8f567681f458a1402b8ebba
-
SHA1
765072c8ce12e83db831baf20ea46151967c9327
-
SHA256
fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47
-
SHA512
1d3b58c99f6df476c8601b33a36873d2a8d178dcc5447dd41f369175ac2b1b09005fbce159cdf1ebce6df4ab41727003c24cb25229718fe09126d0f58d475280
-
SSDEEP
49152:Zs8boAvk/rdETXD/j6qYMtnz8xvMOjyPNerGSbR7Wtg2l3Zjpdc9iO:ZNboAurdEPjfzSb1WtZt
Score
10/10
Malware Config
Extracted
Family
systembc
C2
157.20.182.233:443
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe"C:\Users\Admin\AppData\Local\Temp\fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB