General

  • Target

    68595e9cc8f567681f458a1402b8ebba.bin

  • Size

    1.0MB

  • Sample

    241018-btybws1dlq

  • MD5

    07d2b24770d7b05ee3e5f1b3d70c6f8f

  • SHA1

    34fdef98d56709cb549905c11055b4f58c9597ac

  • SHA256

    7cf763f6572c30c345ee85fec8d3ae604886cfcbf101d25372f8da9a258c3f5f

  • SHA512

    d23e7d26caa7cf4c7d6826f80556f07b8d9fb113073ac8f03467c58839cd36d54c57899a0cc49de842e2461583a57a6146b173541894ae23883c96be75c76783

  • SSDEEP

    24576:7IORV8aNc2L14T/+NfEZFQlKEfJUZzUy8ajPEZIazGtP3iD:5RV84Vc8fEkl1fGuy8apNpiD

Malware Config

Extracted

Family

systembc

C2

157.20.182.233:443

Targets

    • Target

      fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47.exe

    • Size

      2.1MB

    • MD5

      68595e9cc8f567681f458a1402b8ebba

    • SHA1

      765072c8ce12e83db831baf20ea46151967c9327

    • SHA256

      fa799a71a861836158017dae1fd2771ea5acc514fa7d46a84213a7b232d5bc47

    • SHA512

      1d3b58c99f6df476c8601b33a36873d2a8d178dcc5447dd41f369175ac2b1b09005fbce159cdf1ebce6df4ab41727003c24cb25229718fe09126d0f58d475280

    • SSDEEP

      49152:Zs8boAvk/rdETXD/j6qYMtnz8xvMOjyPNerGSbR7Wtg2l3Zjpdc9iO:ZNboAurdEPjfzSb1WtZt

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

MITRE ATT&CK Enterprise v15

Tasks