systembc | 9b54754582586ad2d35c0808387dbb5c21c3ca0c88313aebe4a891594703ac60

General

Target
2026-08-24_7e9622324f242fe305e7494a95f806a9_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop
Size 392KB
Sample260825-lfbwvazcmd
SHA256 9b54754582586ad2d35c0808387dbb5c21c3ca0c88313aebe4a891594703ac60
MD5 7e9622324f242fe305e7494a95f806a9
SHA1 9c7a5c27bc5791f673f88557cd3f43ce6d4563ee
SHA512 b010d6e07b5febbfbd41fe7307528987c761c2dffa9ce56470ba6c73fc7fa4e7598bbb54d6715bbd233cb8e8e8de65dbf92e80dccd75e699bfafc5b6b84e0049
SSDEEP 1536:JPMkZ0QBIaV0rsznyPoQ/aTrQuknnigvqIBOF0BH+9Brcn5u4pFpYZgysKMkgR:MkaVavXKniwqI4mH5uSFCZWKNgR
TLSH
T1E78429C0B7F2C472D8B93B733849AF914D757621562975C33B26AD1E4F600E1EBA2B06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

systembc

C2

anzo11rikasha22b.pw
kall4234ribk3assa.pw

Attributes

dns
5.132.191.104

92.163.33.248

206.189.120.27

Targets

- Target
  2026-08-24_7e9622324f242fe305e7494a95f806a9_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 392KB
- SHA256 9b54754582586ad2d35c0808387dbb5c21c3ca0c88313aebe4a891594703ac60
- MD5 7e9622324f242fe305e7494a95f806a9
- SHA1 9c7a5c27bc5791f673f88557cd3f43ce6d4563ee
- SHA512 b010d6e07b5febbfbd41fe7307528987c761c2dffa9ce56470ba6c73fc7fa4e7598bbb54d6715bbd233cb8e8e8de65dbf92e80dccd75e699bfafc5b6b84e0049
- SSDEEP 1536:JPMkZ0QBIaV0rsznyPoQ/aTrQuknnigvqIBOF0BH+9Brcn5u4pFpYZgysKMkgR:MkaVavXKniwqI4mH5uSFCZWKNgR
- TLSH
  T1E78429C0B7F2C472D8B93B733849AF914D757621562975C33B26AD1E4F600E1EBA2B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery systembc trojan upx
- Family: SystemBC
  SystemBC is a proxy and remote administration tool first seen in 2019.
  trojan systembc
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: SystemBC

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2