Extracted

• • Target

    JaffaCakes118_6df1d82f487420429df0bc4cc748998ad7bc4c974c319bdbca5bd5120a7c5ee2

  • Size

    714.1MB

  • MD5

    290a6dd1f1af92f4834d6b1a188ada23

  • SHA1

    a92afa4834a5a96d118279d140b7f44b571f85cd

  • SHA256

    6df1d82f487420429df0bc4cc748998ad7bc4c974c319bdbca5bd5120a7c5ee2

  • SHA512

    fefb2ea8552d66d95fceed2de2757d11f923502ace4a248f0b59019b3d63c336cccbff9b6df2f51a1388fa399b44ccebafe8c732f089726803616e65cbf0d41d

  • SSDEEP

    49152:qGGimlWpqih97dqOTLBBH6xcUlUxPWlDAud:qGGvly97dqOPBhIZAud

  Score

  10^/10

  systembcdiscoverytrojan

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2