Extracted

• • Target

    73a31d3ce275e2ac8acfe570a47710ed119e92e6b1860647030d65863145138a

  • Size

    1.4MB

  • MD5

    5815bcacea7fda37e5e36a2b7c14be34

  • SHA1

    b85a94538708a3cd2e3cd04d5b7c3ba1b18e1f71

  • SHA256

    73a31d3ce275e2ac8acfe570a47710ed119e92e6b1860647030d65863145138a

  • SHA512

    06b89d7673e39e2f7f63dd3b3706a9093227da581ce6db4a4da0d53650656952e0ff2387917c83f51df1f4921d5c53193fc4f0ae8d411de95893917cf9f0dab6

  Score

  10^/10

  bumblebee276aevasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2