Overview

overview

10

Static

static

10

1f4d12ddad...b2.exe

windows10-2004-x64

10

1f4d12ddad...b2.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1f4d12ddad20dd3b74bbd9579f0c57b2.exe
  • Size 40KB
  • Sample260824-a35lwsbf95
  • SHA256 1eb027a9844495e9a3c64bc0c7ea645058933a9b18cc98ff3f42a7b1a9142753
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojansystembc

Malware Config

Extracted

Family

  • systembc

C2

  • bernieforweeed.com:4001

  • 94.158.247.29:4001

Attributes
  • dns

    5.132.191.104

    92.163.33.248

    206.189.120.27

Signatures

  • Family: SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 1f4d12ddad20dd3b74bbd9579f0c57b2.exe
    .exe 40KB

1f4d12ddad20dd3b74bbd9579f0c57b2.exe

  • IMPHASH 6cf9e3e4ea52048ec6ef92a1a0d9abd1
  • SHA256 1eb027a9844495e9a3c64bc0c7ea645058933a9b18cc98ff3f42a7b1a9142753
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx86arch:x86

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths