General

  • Target

    1e130ae675b8766e730ac0e8b555c0c1.bin

  • Size

    124KB

  • Sample

    241018-bgvegaxcjg

  • MD5

    f7c01a3178286375c89f297c3398e123

  • SHA1

    978799887740cfbef448ade3ff15bcbb7cf585cf

  • SHA256

    943e21c9a93dabfcda4a5f7c88dbc581aee94bdfaf897c84eba6a48eb50906e8

  • SHA512

    b61ecafc2841031a2bdb9977cbcf2cb5b87aa51f82c8aaf29dd45291ed5df8d7c6fb0c471cebbfcd4b337a0cbf067b1f5d58aa09c572e95851b1bd628741de99

  • SSDEEP

    3072:e/e8CbiKBTHDGBNw3Tx7xH4HRjSOvzOiR43Rm+IR1wgMdtJMcwLmzhP:eS+KBTKY3pFMOiuRMWgjv6hP

Malware Config

Extracted

Family

systembc

C2

157.20.182.233:443

Targets

    • Target

      5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447.exe

    • Size

      327KB

    • MD5

      1e130ae675b8766e730ac0e8b555c0c1

    • SHA1

      7b872d6799506ecb1a6a69b0b16cf53a70a337be

    • SHA256

      5fef7a5db4b1c216c9fc37d55143e5b635e8833d82f95004bb4fb47060fdf447

    • SHA512

      1e38ca35417bd0c52761e492264dfa778af968164cb5b0da9b511542d987f363be6b1dd6514acbf93c5adddd2df83f8190299cb72814c97bf49c141f12123dbf

    • SSDEEP

      3072:7o9Nt/aZaw9/YRGPwK6DyER+3szzE98bq8Ag0FuTR6THf0XuzWmvrFdkKWVjyXFv:72T/e54GPwja34hAOAFW27R6iqFjq

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks