General
-
Target
patched.dll
-
Size
1.1MB
-
Sample
220817-2fgp4adfck
-
MD5
6ac69893d567fb27c380543348ad48c7
-
SHA1
9c34fd73f90ba4ca9eae329b0708ac870dea5f40
-
SHA256
9b2c2d78ed4fce7e637174f95b77ceee22a9023c563fd396be6cf2c419b2847b
-
SHA512
110dff2a00e15477568571e08a365c51665cc0420846da277781476070cc440625b012a448e32c4fa89babd1dd70a840262a92b77663e55302143037cbbc4a7d
-
SSDEEP
24576:AYma2+MNU4NemNEfD/1npU9vsxR1RVOFRBDHne:QNUxmOfD/1nyidRVOnBDHn
Behavioral task
behavioral1
Sample
patched.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
patched.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
bumblebee
1608
105.225.235.77:293
248.94.74.210:141
65.253.175.27:369
129.251.52.181:210
43.53.48.241:465
157.43.101.4:490
197.59.117.102:179
154.108.97.105:287
43.154.78.119:231
111.199.20.97:430
44.247.110.165:413
163.98.16.142:234
187.182.118.112:215
40.82.47.229:321
39.227.72.221:450
117.4.222.206:347
34.133.24.204:487
120.81.112.121:328
247.113.218.179:216
78.209.128.70:163
96.69.156.160:204
212.14.183.81:129
148.31.151.121:417
138.5.156.63:224
239.197.3.91:353
152.73.82.73:176
241.62.115.147:271
125.0.208.181:409
108.174.194.151:443
252.163.183.0:240
39.229.24.231:386
83.94.205.67:116
168.193.176.182:132
0.90.45.147:208
143.163.33.93:125
166.119.198.174:320
221.144.39.248:309
196.110.121.198:113
220.44.163.50:442
21.13.239.26:367
45.114.36.177:279
146.70.124.117:443
51.77.41.66:443
155.132.106.239:304
83.94.84.22:375
60.165.255.153:379
79.142.36.67:343
193.6.134.9:257
250.21.228.252:324
87.41.192.173:210
92.111.77.130:463
35.169.148.222:371
57.35.238.74:228
Targets
-
-
Target
patched.dll
-
Size
1.1MB
-
MD5
6ac69893d567fb27c380543348ad48c7
-
SHA1
9c34fd73f90ba4ca9eae329b0708ac870dea5f40
-
SHA256
9b2c2d78ed4fce7e637174f95b77ceee22a9023c563fd396be6cf2c419b2847b
-
SHA512
110dff2a00e15477568571e08a365c51665cc0420846da277781476070cc440625b012a448e32c4fa89babd1dd70a840262a92b77663e55302143037cbbc4a7d
-
SSDEEP
24576:AYma2+MNU4NemNEfD/1npU9vsxR1RVOFRBDHne:QNUxmOfD/1nyidRVOnBDHn
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger
-