Extracted

• • Target

    JaffaCakes118_b4d9f02fa75686adbfd3ee433b4a4203

  • Size

    209KB

  • MD5

    b4d9f02fa75686adbfd3ee433b4a4203

  • SHA1

    2c7d0420ca979ab6faeea5c6fdf7135963f12e87

  • SHA256

    8163d2dd713dc31d3a0a234985d7dc735d1106783a401ce585508fefc56230dc

  • SHA512

    bb5083ddc33af84ef768826b4b20ef3654f044cd1dfee6d81ccca5ed111446fb8c8762fb5c4c0a20ed1da19af7b40d10daf51ecd2b0e273d5ecffc4b29ed91cc

  • SSDEEP

    6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ua:cnLh9yn52rpUR5vHuRYpM+a

  Score

  10^/10

  systembcdiscoverytrojanupx

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2