Resubmissions
06-02-2025 18:26
250206-w3fhnavkek 1006-02-2025 18:23
250206-w1f2eavjhp 306-02-2025 18:18
250206-wxn8lssnbw 3Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250128-en -
resource tags
-
submitted
06-02-2025 18:26
General
-
Target
6af2283337104fac154c26c7c55f274f4c36a231497af96f414897dfbeb6691c.dll
-
Size
170KB
-
MD5
bdb4ac4471357fc7aa79b5e8c25856b4
-
SHA1
4ebafc71fff4539f27a26b00bfc6ce6cd4041ac8
-
SHA256
6af2283337104fac154c26c7c55f274f4c36a231497af96f414897dfbeb6691c
-
SHA512
c50ba0b2f077af0036c7f0c71010f826bd655c5aa79cfef33469975e2b6f81b69288591fddf1bddbc6e4617426a39d86f0de22cca05d51c93e8779103ac4aef5
-
SSDEEP
3072:Accccccc9cccccccccccccccycccccccccccccccccccccccBccccccccccccccT:5kJJRhgQy
Score
10/10
Malware Config
Extracted
Family
systembc
C2
38.180.80.158:4396
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Systembc family
-
Blocklisted process makes network request 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6af2283337104fac154c26c7c55f274f4c36a231497af96f414897dfbeb6691c.dll, #41⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
24KB