Extracted

• • Target

    c477f22f36f0c7e272e694e0e630996f6bfdbf5ba93296dabe63581ab8ca96f6.exe

  • Size

    1.2MB

  • MD5

    c306310f6b7674b64e7c48e46d480509

  • SHA1

    0e75e48e8e63f081ee79aaf3bc70004d40f00b08

  • SHA256

    c477f22f36f0c7e272e694e0e630996f6bfdbf5ba93296dabe63581ab8ca96f6

  • SHA512

    73a7035def27aa1fc7748e5f25d98c569534e7bb8c5d65731fcf2ae26e6a2101e635f26548f7b759fcc0bc5b5f32a0f9f0888e51e03f7287ed67feef625ff711

  • SSDEEP

    24576:Oua4nde8YqNMGmKhQBgliNDaKiky+YacnExAOYbyp:LoWqfgliNDafthacnqAOj

  Score

  10^/10

  discoverysystembctrojan

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Drops startup file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2