systembc | c5e384403ba328a2254e5e4ae3f980a8b47f35656b14bb9353b3cce993ef6562 | Triage

Sharing

General

Target

c5e384403ba328a2254e5e4ae3f980a8b47f35656b14bb9353b3cce993ef6562
Size

5KB
Sample

241216-p37hta1kav
MD5

6f6025d25d0edc9a1343a8d7b2a80dd5
SHA1

f2665d9c1405d1e134c68ef2626a1ee97947748b
SHA256

c5e384403ba328a2254e5e4ae3f980a8b47f35656b14bb9353b3cce993ef6562
SHA512

f5ca8ff07f2cca64cb0e75a8614cdb54fc2baa2420217a930de4a115ef45c0c635f11c709312879b545af356a11d21f69c40a36c0cd39ddd2bd366f739000b0e
SSDEEP

96:Ltfm7b4I4MxZUGr51kCRA15oncwHlSlNpctT3xNKjRd+asy331o+:kYvMxZUGPkWUccggPpctzSjRday31T

Score

10^/10

systembc discovery

Malware Config

Targets

- Target
  
  socks.dll
- Size
  
  11KB
- MD5
  
  ba11a2315fe2fab73a93f8109c50b423
- SHA1
  
  26cbaf95db474393e81c8189416a7013ced8a046
- SHA256
  
  2f5e78a842f0e4b9a4851177188d97fe43777962c73eb50c03dc4a9e74b3be60
- SHA512
  
  2e951e962f502f7a07b045ba1e5bea20baca33e87dc83195983843e8c0b223cadc850a74a4d24b0b047f7e144e8f84c79cac883a2634c26ddbf1d8b88794123e
- SSDEEP
  
  192:lNCTnyn4lpuIc7rcWQcp7CkXhrQzpa1u:G7DpuIiHdXua1
Score

8^/10

discovery
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2