Overview

overview

10

Static

static

10

de4e3ff7f7...66.dll

windows7-x64

8

de4e3ff7f7...66.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44163d81bb5710839fb9ba265de2c942.bin

  • Size

    6KB

  • MD5

    d909dd93c2238e21a1ba11ffd9e52e8e

  • SHA1

    c240f84c0997b4e8872734c80806443ca08ab632

  • SHA256

    9456b0589c9662a6fbd04fa44aa429f7dee06215044c6025f0bffe6ac4eb5550

  • SHA512

    e9ade9357e2eecdb38530a533b79b1b3db9a60f96dbc079b11d37adc5ca033976113f9577b779dd9c39af96275263dfab95959c88fdf81a6c201ce0d0c8bd8e8

  • SSDEEP

    192:zIyrFdzFLoBFzipV20Riy9kv1n0SkODpO:DrDzB8GVJRi99uODk

Score
10/10
systembc

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes
  • dns

    5.132.191.104

    ns1.vic.au.dns.opennic.glue

    ns2.vic.au.dns.opennic.glue

Signatures

  • Systembc family
    systembc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44163d81bb5710839fb9ba265de2c942.bin
    .zip

    Password: infected

  • de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    06838762d82c7c8d4d73da706425a89f


    Headers

    Imports

    Exports

    Sections