Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Ransomware

SystemBC

Ransomware Needs review 24 detections found
This entry hasn't been reviewed yet. It was auto-detected from the MITRE ATT&CK catalog because it self-identifies as ransomware-type malware, but no one has curated a full summary or double-checked its reference links. Treat the details below as a starting point, not a verified profile.

Also known as: Coroxy, SystemBC

Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9001) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's currently known; a proper summary and authoritative eradication references are pending.

Detection & eradication references

Curated links to authoritative sources — MITRE ATT&CK, CISA advisories, law-enforcement takedown announcements, and vendor threat-intel writeups — for removal, remediation, and further technical detail. Sigma Watch does not publish its own removal steps here, since malware behavior and tooling change too fast for a static write-up to stay reliably accurate.

Detection rules

Source Rule Status Updated
snort ET TROJAN SystemBC CnC Beacon rev 1 2024-08-26
suricata ET MALWARE SystemBC CnC Beacon rev 1 2024-08-26
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE SystemBC Powershell bot registration rev 2 2022-03-07
snort ET TROJAN SystemBC Powershell bot registration rev 2 2022-03-07
suricata ET MALWARE Win32/SystemBC CnC Checkin rev 2 2021-02-02
snort ET TROJAN Win32/SystemBC CnC Checkin rev 2 2021-02-02
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17
snort ET TROJAN Observed SystemBC CnC Domain in DNS Query rev 2 2020-12-17