Extracted

• • Target
    Desktop.zip
  • Size 1.2MB
  • SHA256 0e859acbd03e59eae287b124803ec052cf027b519e608c7ccfd920044b9ee1c7
  • MD5 7092d2c4b041db8009962e865d6c5cd7
  • SHA1 11838141f869e74225be8bd0d4c866cb46ef0248
  • SHA512 34325e0b684e8c3a399f323f2292c3f75b1d558cf01590556be7c1aba7a8e95d58a2a3234030c67a835516cabad4d5f27874ff377f79b3d807797a1cbec9de2d
  • MD5 SHA1 SHA512

  Score

  1^/10
  behavioral1behavioral2
• • Target
    7za.exe
  • Size 574KB
  • SHA256 c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
  • MD5 42badc1d2f03a8b1e4875740d3d49336
  • SHA1 cee178da1fb05f99af7a3547093122893bd1eb46
  • SHA512 6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c
  • MD5 SHA1 SHA512

  Score

  1^/10
  behavioral3behavioral4
• • Target
    New Folder.lnk
  • Size 1KB
  • SHA256 315b3d80643da454b40cc938a0e8794f90ccbd05868e55b4848cacbf047850ae
  • MD5 fd21be3db76b714cb4dfae779d1ada1f
  • SHA1 8157b198c00de0a19b1d02ae7b76c78857baccd2
  • SHA512 1c06c3094c47bbfa187f0bb9cb85e76ccc3e715048a0459382c8da28721e774de64a132c716b1bcce6175d769fce296d82e864b90b8aa9e8b27678a40336e0e2
  • MD5 SHA1 SHA512

  Score

  10^/10

  bumblebee2lg5evasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

  • Loads dropped DLL

  behavioral5behavioral6
• • Target
    arch.7z
  • Size 929KB
  • SHA256 7b3e94fd74a6d597b6cd20fb40d56ebaf328dbe2f3df38960e4c31fe2a5b9ef4
  • MD5 e04a4314054f89ff5d8624126138b788
  • SHA1 9aa09f4e7a4f9c889cf36e416177faf9f81ef1a3
  • SHA512 d415ab362abded697ee0b63838c62b2ace2d9698577bec1ac5acea62510c262240de21ef0d120dd7043eebb32b6fcdda32d5a1bbcde021d970da9ba6fffda69d
  • MD5 SHA1 SHA512

  Score

  3^/10
  behavioral7behavioral8