General

  • Target
    260421-jse3xsd12s_pw_infected.zip
  • Size 32KB
  • Sample260822-zrk6jstyct
  • SHA256 b550466401412abb944013e91898924b5316d3021fabe79f7b622dddbba0cfa3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • systembc

C2
  • 45.86.230.112:4001

Targets

    • Target
      992c951f4af57ca7cd8396f5ed69c2199fd6fd4ae5e93726da3e198e78bec0a5
    • Size 32KB
    • SHA256 992c951f4af57ca7cd8396f5ed69c2199fd6fd4ae5e93726da3e198e78bec0a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks