Extracted

• • Target

    JaffaCakes118_50bc4885a2f0311d7ebbe431fd73b3fa03d1352254927e55e8aa6b97ee0100b5

  • Size

    795.5MB

  • MD5

    483b63ace3572e1a179275ad61e42d7c

  • SHA1

    56d1ae06bae37ca4484ee041d36e75e1ce3e2327

  • SHA256

    50bc4885a2f0311d7ebbe431fd73b3fa03d1352254927e55e8aa6b97ee0100b5

  • SHA512

    81eacc8ea39579c64f51fa170a5330e95740f73c6a8acb72d7b32cdfdba66453bcfbcd06a12b449b1c0641729c08e23f6c56face11a0837e760d3ec3149ea64d

  • SSDEEP

    24576:EaCZ2GmWV3uRR7xdMhdQ4X9vbEtA4cB7cyZLTokngqiFMazkuojfm+dNz9eEwiI:uZ2GmWFuRRlyhPXIRcpcaxgnzZojf6

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2