Extracted

• • Target

    15.dll

  • Size

    3.7MB

  • MD5

    8c85cc84e654fa7d4222e8c68dff334f

  • SHA1

    9d8a1d0e1854d2f39e012b39df4651cb11663ca4

  • SHA256

    897bf7aaeee44df44e04fb6b0a276d0be76298569252fe157a39d6071a17631c

  • SHA512

    d0e57b9617c9decab2542b4eec79da7191c4e381d4915b2ce5aa6ab71f1e7b7b8597869563a9219ca1b6fe177e50e392e2d44cf835f9f012d5b129b736f18d7e

  Score

  10^/10

  bumblebeeevasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2