Skip to content

Hide Navigation Hide TOC

SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267)

SystemBC is a commodity backdoor malware used as a Tor proxy and remote access Trojan (RAT). It was used during the high-profile 2021 Colonial Pipeline DarkSide ransomware attack and has since been used as a persistence & lateral movement tool during other ransomware compromises, including intrusions involving Ryuk, Egregor, and Play.[BlackBerry SystemBC June 10 2021][Sophos SystemBC December 16 2020][WithSecure SystemBC May 10 2021][Trend Micro Play Ransomware September 06 2022] According to Mandiant's 2023 M-Trends report, SystemBC was the second most frequently seen malware family in 2022 after only Cobalt Strike Beacon.[TechRepublic M-Trends 2023]

Malpedia (Research): https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Bazaar (Samples & IOCs): https://bazaar.abuse.ch/browse/tag/systembc/

PulseDive (IOCs): https://pulsedive.com/threat/SystemBC

Cluster A Galaxy A Cluster B Galaxy B Level
SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software Vanilla Tempest (efd2fca2-45fb-4eaf-82e7-0d20c156f84f) Tidal Groups 1
SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software BlackSuit Ransomware Actors (1d751794-ce94-4936-bf45-4ab86d0e3b6e) Tidal Groups 1
Play (60f686d0-ae3d-5662-af32-119217dee2a7) Tidal Groups SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software 1
DragonForce Ransomware Group (a58f147b-1f02-427d-a375-c4246335cb20) Tidal Groups SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software 1
Vice Society (2e2d3e75-1160-4ba5-80cc-8e7685fcfc44) Tidal Groups SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software 1
SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software TA577 (e1e72810-4661-54c7-b05e-859128fb327d) Tidal Groups 1
Cuba Ransomware Actors (5216ac81-da4c-4b87-86ce-b90a651f1048) Tidal Groups SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software 1
SystemBC (c30929fb-28a1-407c-a1c3-a83374c63267) Tidal Software FIN12 (6d6ed42c-760c-4964-a81e-1d4df06a8800) Tidal Groups 1