Extracted

• • Target

    documents.lnk

  • Size

    2KB

  • MD5

    0dec891322ec208f9fc252e3469d3467

  • SHA1

    5360130698f866a41625addf03acd977425272f1

  • SHA256

    9c7e01c2c39dadc020a0cf8dc74b62e6453b56413f09705b4ad4d391981f5a3f

  • SHA512

    46f1a5daf5b88f4c8c2a70f5f9e2b77578c7e6b4711dc6e62d4ae8147639f5409496f2eb9ce62b1f9b9e12ffc8560f7c0538fd3c3d0c00fa05a9211be268faf3

  Score

  10^/10

  bumblebee1406revasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2

• • Target

    toso3l.dll

  • Size

    1.7MB

  • MD5

    9e7d45b4f097d4274aa74b5eaade65d9

  • SHA1

    e7b0de2872002621f1aab89fe3c54d579fbe46a0

  • SHA256

    2e349b3224cc0d958e6945623098c2d28cc8977e0d45480c0188febbf7b8aa78

  • SHA512

    5b5518638bd52e3a4253b020b779b85d65563f930692c51b39e78f8df7060bf4fac5aca4b9b70a0dbbeeeb67bba34c627d2978f30a86c4f6e900bba0c3520424

  Score

  10^/10

  bumblebee1406revasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral3behavioral4