systembc | 9456b0589c9662a6fbd04fa44aa429f7dee06215044c6025f0bffe6ac4eb5550 | Triage

Sharing

General

Target

44163d81bb5710839fb9ba265de2c942.bin
Size

6KB
Sample

241214-blb4pasnav
MD5

d909dd93c2238e21a1ba11ffd9e52e8e
SHA1

c240f84c0997b4e8872734c80806443ca08ab632
SHA256

9456b0589c9662a6fbd04fa44aa429f7dee06215044c6025f0bffe6ac4eb5550
SHA512

e9ade9357e2eecdb38530a533b79b1b3db9a60f96dbc079b11d37adc5ca033976113f9577b779dd9c39af96275263dfab95959c88fdf81a6c201ce0d0c8bd8e8
SSDEEP

192:zIyrFdzFLoBFzipV20Riy9kv1n0SkODpO:DrDzB8GVJRi99uODk

Score

10^/10

systembc discovery

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes

dns
5.132.191.104

ns1.vic.au.dns.opennic.glue

ns2.vic.au.dns.opennic.glue

Targets

- Target
  
  de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666.dll
- Size
  
  13KB
- MD5
  
  44163d81bb5710839fb9ba265de2c942
- SHA1
  
  a7497d6085ed8ce25e9728a0af7e989e026eaf04
- SHA256
  
  de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666
- SHA512
  
  97ef4974f41affd04eb960fa873cd9754f31007c3d7239a7fb5b17cc152c01f2050c3b25d107e36ab5c65010610624e773f726de7d39255bb2c0ad5d8b9929a4
- SSDEEP
  
  192:4BNFWXEJWCx1TFZM4kUzGJjZC2363AP0HQ9M1uiTkXhMQzpaQA:4hlJRX7M48ZC2u9wWcXja
Score

8^/10

discovery
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2