Extracted

• • Target

    1af0e12fc38a64654bce554612545b34.exe

  • Size

    1004KB

  • MD5

    1af0e12fc38a64654bce554612545b34

  • SHA1

    2704339f5dc0a824b08b978ccf324cc99231b406

  • SHA256

    79b8594b53a0516453df5007270848fc2018f630b7f4f88feb4beacd420ed83a

  • SHA512

    fb5ff981722253b73549db4d306f02ca21649455b9260a781cb0c2b24164e72bf4cdf24a140fd3dcaad5b21e32a84b49cb3ec558e2d6ab7253f4cb63e91a9ca3

  • SSDEEP

    24576:io23milEV1TtrBxLdx+WjQw8cSh638FF3HEh/LEVbfGf:W2RrBfxzMh6sFtkh/LEbfGf

  Score

  10^/10

  discoverysystembctrojan

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Drops startup file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2