Analysis
-
max time kernel
32s -
max time network
39s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
17-11-2024 11:35
General
-
Target
svc.dll
-
Size
12.8MB
-
MD5
0aa05ebc3b6667954898cfccc4057600
-
SHA1
c59cbd309b3393cb08a1133364ed11000fdd418d
-
SHA256
44cf04192384e920215f0e335561076050129ad7a43b58b1319fa1f950f6a7b6
-
SHA512
d4abd9c548fa8e1e6681585b8e5375b216955ef8b621fb3a27f74e28975e8c6696df18cf96bd6e1229ad0c268877126caabc15b5849c3d401a45675aa0b2b31f
-
SSDEEP
393216:99pRr+jrfTxceLsf4KseXYpfkAxu7oSVVmr:7+jTTxccsfRXAWmr
Score
10/10
Malware Config
Extracted
Family
systembc
C2
185.236.232.20:445
192.168.1.28:445
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Systembc family
-
Blocklisted process makes network request 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\svc.dll,#11⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.6MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
12.8MB
-
Filesize
6.6MB