Extracted

• • Target

    69kwq90.dll

  • Size

    3.5MB

  • MD5

    7ad55184fac8e8fd14aec8a0dd640793

  • SHA1

    e22f228da37e6259958d8230cecbc0c069e55ef4

  • SHA256

    fce34222fecb0145d37af99a46dabd30f4bf9e7c39c0f355fbfbdbe6a94687ee

  • SHA512

    d6bb6555b9c007c313ee528ad9e43f0cc7a02d9c8833145295d767f5f5927080af48992bd110763cca8a27d0cf7facf1fca7d0c513388437dd074d950dae83d7

  Score

  10^/10

  bumblebee2704revasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2

• • Target

    documents.lnk

  • Size

    1KB

  • MD5

    ce056650c27a20d66184651450d7c989

  • SHA1

    7752f3b03c95020958032daec1aebf16aca9eae5

  • SHA256

    83b4471ad3049c8b8b6fed5231de4a93add014dfd4b46ff4d207c5a35602667e

  • SHA512

    8e498ee2413fe9d0034ce70d1e83ef1d36ca137c9af2d8263d74a30d2a26f2516084db97066359f599392197a0c35a1d231142213f8cdad90131e2ff5169cf2a

  Score

  10^/10

  bumblebee2704revasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral3behavioral4