Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    4c8ac513a1b3c3ff79bbe5c00e79fb1e

  • SHA1

    193102b18ef58c2e0c07fe9c3e6c184b327bc10d

  • SHA256

    a37cd6051edefa788e7cc5b863ef71f6c90c2def033c710f43840ee936f0bfaf

  • SHA512

    8d5ce42d71d9e30d15b8c5ac9a7fb89f1966f944ab6a218734eeaf64d6a7cad9d3de50a916103beef4a1d93fc9ce95e6b65fb7442871fe44a8fabeaf2c458380

  • SSDEEP

    24576:BwKDe573ai3r6ZamY44kRy7F7XZrAI/F466x7NkHJ3ZahOLHxkX1:5q53rr6HDBy7F7JrZu5MJpCwRkX

  Score

  10^/10

  discoverysystembctrojan

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Drops startup file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2