systembc | de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666 | Triage

Sharing

General

Target

de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666.dll
Size

13KB
Sample

241213-dlbh9swqgw
MD5

44163d81bb5710839fb9ba265de2c942
SHA1

a7497d6085ed8ce25e9728a0af7e989e026eaf04
SHA256

de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666
SHA512

97ef4974f41affd04eb960fa873cd9754f31007c3d7239a7fb5b17cc152c01f2050c3b25d107e36ab5c65010610624e773f726de7d39255bb2c0ad5d8b9929a4
SSDEEP

192:4BNFWXEJWCx1TFZM4kUzGJjZC2363AP0HQ9M1uiTkXhMQzpaQA:4hlJRX7M48ZC2u9wWcXja

Score

10^/10

systembc discovery

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes

dns
5.132.191.104

ns1.vic.au.dns.opennic.glue

ns2.vic.au.dns.opennic.glue

Targets

- Target
  
  de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666.dll
- Size
  
  13KB
- MD5
  
  44163d81bb5710839fb9ba265de2c942
- SHA1
  
  a7497d6085ed8ce25e9728a0af7e989e026eaf04
- SHA256
  
  de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666
- SHA512
  
  97ef4974f41affd04eb960fa873cd9754f31007c3d7239a7fb5b17cc152c01f2050c3b25d107e36ab5c65010610624e773f726de7d39255bb2c0ad5d8b9929a4
- SSDEEP
  
  192:4BNFWXEJWCx1TFZM4kUzGJjZC2363AP0HQ9M1uiTkXhMQzpaQA:4hlJRX7M48ZC2u9wWcXja
Score

8^/10

discovery
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2