systembc | d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462

Analysis

max time kernel
132s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
28-01-2025 15:00

Target

d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462.elf
Size

5KB
MD5

4a615d2b93b90482e20990b1996cf888
SHA1

5fad1c9909fd75f9ba3f93b33126362707622378
SHA256

d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462
SHA512

45c13e87382e0415cd1826b380b7ebdfd06f860b4513f4717a88c44a84ce368d23156cfe834fe9caf74023f5f55edc0e59784861159e4b25de8235feeca335c4
SSDEEP

96:Gb9wZ5rZKTshhvztelqOZtkiFRX+peeLWv9m+iQeBkm4LiDHdCisY4v/S5:GbMZgsbVOZFGlyv9m+iQUuLiD9C1vHG

Score

10^/10

Family

systembc

79.110.62.222

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc
Systembc family
systembc

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462.elf

/tmp/d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462.elf
/tmp/d1241a250af93c0e1dc407c795f6e0c016ed40326034d722110fc8c97b71d462.elf
1⤵
- Reads runtime system information
PID:2493