We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Behavior:Win32/SystemBC.A!nri
Aliases: No associated aliases
Summary
Microsoft Defender Antivirus detects and removes this threat.
SystemBC is a tool used by attackers for compromising a target device, where it then runs various Windows commands. It can also download other malicious scripts, executable files, or dynamic link libraries (DLLs) from remote servers and launch them on an infected device.
Threat actors are also known to use this tool to deploy ransomware payloads.
Microsoft Defender Antivirus automatically removes threats as they are detected. If you have cloud-delivered protection, your device gets the latest defenses against new and unknown threats. If you don't have this feature enabled, update your antimalware definitions and run a full scan to remove this threat.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
