Extracted

• • Target

    c0967a95f4a2ccfe64139ea5bbbb6c87688b64e26b0d61f068ccd0a4782a057e

  • Size

    1010KB

  • MD5

    edbf90615adcab2e37525f41cfcbdcf0

  • SHA1

    8e5ad8f1ba8d2e0aad33e1a6b2b5ef90f628650c

  • SHA256

    c0967a95f4a2ccfe64139ea5bbbb6c87688b64e26b0d61f068ccd0a4782a057e

  • SHA512

    792e62f026ca3474f458ffdc15ed18ca5185989b735c69d18671dce8330fcc3744abad183e4ac5c5df4f77acb1c7bbf4f1bd2f4441b1b8e8671c17a95f83e12f

  • SSDEEP

    24576:IgWIa+M0IGZ3jGBUii9YkIw/61JuYrv+Ux7T:PkSIkIUiaPl/617+UZT

  Score

  10^/10

  discoverysystembctrojan

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Drops startup file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2