Extracted

• • Target

    sec.dll

  • Size

    1.7MB

  • MD5

    a30bf883c38b54c3b22a2f8ccfb1bd8a

  • SHA1

    9a5ec009753040c5214b864d9d271901eb4542ac

  • SHA256

    95a6114c8b9879ebc9a0142fcd46d41dd428380a27d5b396a232f42e4a505fb2

  • SHA512

    64d3f30c8564e4eedecd7f3f8c3b1eafaa3d781fb5bef39825ea1b8fdd1f39c38ac477f08a7a147fcb2f404c32ded7ae841b5bb443070945e1aa60668838ed58

  Score

  10^/10

  bumblebee286aevasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2