Extracted

• • Target
    15.dll
  • Size 3.7MB
  • SHA256 897bf7aaeee44df44e04fb6b0a276d0be76298569252fe157a39d6071a17631c
  • MD5 8c85cc84e654fa7d4222e8c68dff334f
  • SHA1 9d8a1d0e1854d2f39e012b39df4651cb11663ca4
  • SHA512 d0e57b9617c9decab2542b4eec79da7191c4e381d4915b2ce5aa6ab71f1e7b7b8597869563a9219ca1b6fe177e50e392e2d44cf835f9f012d5b129b736f18d7e
  • MD5 SHA1 SHA512

  Score

  10^/10

  bumblebeeevasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2