systembc | 395ce9ef1390ea52bd68d3190435be76981198a860086133b1caadfa6c03292d

General

Target
2026-05-11_490227c5524d29da77afea2806c8eb12_amadey_darkgate_elex_gcleaner_glassworm_hacktools_luca-stealer_njrat_remcos_smoke-loader_zxxz
Size 76.8MB
Sample260511-mb2r5sat4j
SHA256 395ce9ef1390ea52bd68d3190435be76981198a860086133b1caadfa6c03292d
MD5 490227c5524d29da77afea2806c8eb12
SHA1 fd1b53acdffe5ce89d783ab0e828c7f888dd014e
SHA512 6265b52530d7b28ba6b354cd60c59603fb8971a015fde460534c4431c25a5613c130481e87f7383f4856d2e9cd2195a7dfe61a2f34ef65693d80098c06c52182
SSDEEP 393216:HrobhiS/+dvg/03yf9KBADT1aJld1dRdDT2CYzXBYMh/pxzgkArEfhDNajjt5RU7:E0C+G+lfLpML/Q6QkvLfPn4ywrPWFR
TLSH
T1FE0890A37B00D8EDFC470D716BBE86A07C23BD752911E52A72807F9D29322D07D6E51A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

systembc

C2

232.92.255.255
150.115.113.176

Targets

- Target
  2026-05-11_490227c5524d29da77afea2806c8eb12_amadey_darkgate_elex_gcleaner_glassworm_hacktools_luca-stealer_njrat_remcos_smoke-loader_zxxz
- Size 76.8MB
- SHA256 395ce9ef1390ea52bd68d3190435be76981198a860086133b1caadfa6c03292d
- MD5 490227c5524d29da77afea2806c8eb12
- SHA1 fd1b53acdffe5ce89d783ab0e828c7f888dd014e
- SHA512 6265b52530d7b28ba6b354cd60c59603fb8971a015fde460534c4431c25a5613c130481e87f7383f4856d2e9cd2195a7dfe61a2f34ef65693d80098c06c52182
- SSDEEP 393216:HrobhiS/+dvg/03yf9KBADT1aJld1dRdDT2CYzXBYMh/pxzgkArEfhDNajjt5RU7:E0C+G+lfLpML/Q6QkvLfPn4ywrPWFR
- TLSH
  T1FE0890A37B00D8EDFC470D716BBE86A07C23BD752911E52A72807F9D29322D07D6E51A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery systembc trojan
- Family: SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- Detects executables built or packed with MPress PE compressor
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: SystemBC

Detects executables built or packed with MPress PE compressor

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2