Analysis

  • max time kernel
    380s
  • max time network
    432s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/03/2025, 19:41

General

  • Target

    DTSS2SpeakerDLL.dll

  • Size

    1.7MB

  • MD5

    b7cc5c9560070454482c8da2e245a009

  • SHA1

    89f9236556b422f02fd9bda9ab175eb9133fda72

  • SHA256

    ec6ccf63abeb8c03f55fc67ef1d4d8674d2efc7055041ffd4968391291634f52

  • SHA512

    b20099c76824a52e2f6adcde68ea3e0b49fde1d45029ebb29d6eb661ad57e58b860f67dbd1ef4d98de962e6c2184c1489ebc872db716277cbf806914a9ad5480

  • SSDEEP

    12288:H8E2JPuWxQUG78WF/eKQSeE6qOFPqZTM8WtSWlYW3l4F8A3f6/0N6A2bDhy:HAZuWxW78WFUPq2Ftl4Bi/0N6DE

Score
10/10

Malware Config

Extracted

Family

systembc

C2

66.85.173.11:4001

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

  • Systembc family

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DTSS2SpeakerDLL.dll,#1
    1⤵
      PID:856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/856-0-0x0000000180000000-0x0000000181CA2000-memory.dmp

      Filesize

      28.6MB

    • memory/856-4-0x000002A600000000-0x000002A601CA1000-memory.dmp

      Filesize

      28.6MB