General
-
Target
2a.dll
-
Size
1.0MB
-
Sample
220824-p2r2qsdedn
-
MD5
3421a06f8c85e0bfd0b2d7f5549809ba
-
SHA1
139f7e359a72852f9d4f98d4e67104f14b597680
-
SHA256
f4e0528ea9aa23b92e884db2dedfc8942e111034d548d0ad25111da592312d02
-
SHA512
bafad1b1bf78c8d191575d76b4bae83307ef6eb7b84f353cb42f75008aaf9064ae94e45d5c421f6fa31172acaaf7d481135123873ce434d6b56d84284e531b7e
-
SSDEEP
24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnwN+8Q:UetB7PBOf0F9Zx/9/y2YG9w
Behavioral task
behavioral1
Sample
2a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
bumblebee
1808
239.126.49.190:498
196.168.62.83:324
172.142.116.53:193
169.97.45.42:168
247.83.130.199:407
70.112.52.169:210
103.122.133.243:267
55.106.230.180:382
194.15.216.113:443
110.3.133.248:213
117.142.183.252:397
91.129.147.214:191
123.220.89.110:305
154.56.0.110:443
103.19.6.147:262
201.162.166.187:181
242.99.166.156:402
64.44.98.157:443
206.197.111.241:287
0.201.90.211:280
93.38.5.160:282
154.193.158.104:208
198.220.25.240:474
160.195.60.12:193
140.72.28.34:383
146.83.18.125:176
62.16.226.86:331
5.149.62.223:397
128.136.244.230:450
218.108.241.90:247
4.0.218.78:181
178.71.44.234:375
37.139.4.145:274
204.59.201.104:416
115.172.128.24:387
88.22.142.109:326
225.170.203.16:363
121.206.103.206:102
249.135.245.2:369
235.3.70.154:377
145.157.132.191:478
107.89.41.42:415
110.27.111.86:301
212.197.222.113:169
164.42.111.9:446
135.44.16.33:335
155.41.171.72:341
113.201.106.34:459
163.40.71.47:425
164.240.123.34:216
88.51.13.27:285
65.51.74.14:171
49.226.81.24:386
Targets
-
-
Target
2a.dll
-
Size
1.0MB
-
MD5
3421a06f8c85e0bfd0b2d7f5549809ba
-
SHA1
139f7e359a72852f9d4f98d4e67104f14b597680
-
SHA256
f4e0528ea9aa23b92e884db2dedfc8942e111034d548d0ad25111da592312d02
-
SHA512
bafad1b1bf78c8d191575d76b4bae83307ef6eb7b84f353cb42f75008aaf9064ae94e45d5c421f6fa31172acaaf7d481135123873ce434d6b56d84284e531b7e
-
SSDEEP
24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnwN+8Q:UetB7PBOf0F9Zx/9/y2YG9w
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger
-