Extracted

• • Target

    490c603f0ed1e224b7589358ab78a03dd109e4f69b67b12ff0645bb7e083a20a

  • Size

    2.2MB

  • MD5

    dedb8ce49e5f1f00640bf0b87cb8dbdb

  • SHA1

    2d88f6f8e27604810bfecc78d334362bf2d1cda0

  • SHA256

    490c603f0ed1e224b7589358ab78a03dd109e4f69b67b12ff0645bb7e083a20a

  • SHA512

    2452546bbdcb32c63ac00833c416c68136b5e2fb69a278314659176512b5f4cb8380d9435e40fd8087da44c43524ac5a233b37a343997a909f33d6b6f0b1d094

  • SSDEEP

    49152:VFCN368IYHAdu3EveTbSJfpjwIsRBnqTPweLJ2GbWi9sYS1HfDxwAlPjJvLRUFt3:VFCN368IYHAdu3EveTbSJfpjwIsRBnqp

  Score

  10^/10

  discoverysystembctrojan

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Systembc family

    systembc

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2