systembc | ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a

Analysis

max time kernel
129s
max time network
146s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
28/01/2025, 15:01

Target
ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a.elf
Size 5KB
Sample250128-sdvz9ssldx
SHA256 ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a
MD5 7284354201465b12af52af85c48f0873
SHA1 e38cedde94924dbeda9f090a12371fb3e02cdff2
SHA512 377310532d762ff8c45bad91757ed2a43713716a970ee99478edb622be95c40c71e91a1ce145d4f163ace5702c610e83978d7178b0718b3e49dae1e10dae6cc0
SSDEEP 96:G2Iea88uCQ/FnlFDUr/b8huWjRBpeeLWv9m+iQeBkm4LiDHdCisY4v/au:G2XCQtlVy8huWdlyv9m+iQUuLiD9C1v5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
trojan systembc
Systembc family
systembc

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a.elf

/tmp/ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a.elf
/tmp/ab1f9ea02bfb108fc731401a0039317863df59dd3e90bbf86a3f278db59b506a.elf
1⤵
- Reads runtime system information
PID:1566