General

  • Target

    svc.dll

  • Size

    12.8MB

  • Sample

    241117-npz15stkgl

  • MD5

    0aa05ebc3b6667954898cfccc4057600

  • SHA1

    c59cbd309b3393cb08a1133364ed11000fdd418d

  • SHA256

    44cf04192384e920215f0e335561076050129ad7a43b58b1319fa1f950f6a7b6

  • SHA512

    d4abd9c548fa8e1e6681585b8e5375b216955ef8b621fb3a27f74e28975e8c6696df18cf96bd6e1229ad0c268877126caabc15b5849c3d401a45675aa0b2b31f

  • SSDEEP

    393216:99pRr+jrfTxceLsf4KseXYpfkAxu7oSVVmr:7+jTTxccsfRXAWmr

Score
10/10

Malware Config

Extracted

Family

systembc

C2

185.236.232.20:445

192.168.1.28:445

Targets

    • Target

      svc.dll

    • Size

      12.8MB

    • MD5

      0aa05ebc3b6667954898cfccc4057600

    • SHA1

      c59cbd309b3393cb08a1133364ed11000fdd418d

    • SHA256

      44cf04192384e920215f0e335561076050129ad7a43b58b1319fa1f950f6a7b6

    • SHA512

      d4abd9c548fa8e1e6681585b8e5375b216955ef8b621fb3a27f74e28975e8c6696df18cf96bd6e1229ad0c268877126caabc15b5849c3d401a45675aa0b2b31f

    • SSDEEP

      393216:99pRr+jrfTxceLsf4KseXYpfkAxu7oSVVmr:7+jTTxccsfRXAWmr

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Systembc family

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks