Extracted

• • Target

    JaffaCakes118_8b862b5b0e4fdb4d398055c790a8846089b53ee47ce605efd3198426e4edaf4c

  • Size

    698.1MB

  • MD5

    4ecaa168b95dd762fdcaea1b47b2a112

  • SHA1

    962137afc085b16a55a44bbf6a3d62b2b3d6a6ee

  • SHA256

    8b862b5b0e4fdb4d398055c790a8846089b53ee47ce605efd3198426e4edaf4c

  • SHA512

    445b456ee8456695c75ed46ac65f65d4fb91fae59f05f6d9ed6f98123300aa9a354d19299e17e0a58348db000a9860538066be8fc7ee316ec59dda4ff832d0a5

  • SSDEEP

    49152:WbGala7PGeJAyPjmSE83wQ52Ah1aYIziFbJATz9RJv5gns6hjVDmivym:NaleMyBfHqzR6dVDmivym

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2