General
-
Target
out.dll
-
Size
1.0MB
-
Sample
220824-xa1hsshefn
-
MD5
40cedc7e500033ef29be123ad0468020
-
SHA1
8582e273151c56dc4888bc590cdb0c884487eead
-
SHA256
c193c7ad0c5b19fc56c8a81ef11eb89efa6fa32c9091a12530bfc2d5ea14ca6a
-
SHA512
7718f821ecef9773bbe96ad7d069b41bed9bcd4c443092b58935fc7b560d0787ddfd1a277f29bfba5d66c6ded5b1bc34908847692c47493e2d19f193b0ec4633
-
SSDEEP
24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnw49Q:UetB7PBOf0F9Zx/9/y2YG9w
Behavioral task
behavioral1
Sample
out.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
out.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
bumblebee
2408
108.30.109.238:341
107.21.49.73:412
212.227.199.94:119
26.88.252.40:148
217.243.85.139:190
50.20.147.145:346
115.58.47.223:480
150.158.205.226:428
222.132.86.189:463
112.102.174.20:379
94.49.121.33:341
131.233.140.11:104
85.118.251.137:412
183.89.9.91:295
219.98.254.216:386
33.218.244.230:266
29.167.160.212:332
78.193.54.213:166
86.214.84.193:173
98.206.43.235:371
69.178.215.238:452
139.221.92.16:250
121.232.4.189:486
41.13.84.228:481
20.228.65.94:319
100.29.163.95:141
125.118.83.42:384
152.176.82.140:269
108.157.59.172:183
239.91.7.251:266
48.192.227.189:212
105.160.138.197:201
254.253.238.214:473
167.30.25.114:450
10.137.202.46:333
198.98.59.64:443
92.236.128.103:401
24.123.2.198:217
45.147.229.47:443
94.154.149.175:121
145.226.93.229:399
117.77.158.162:433
206.12.40.143:333
105.111.151.74:373
109.215.60.10:137
85.117.103.166:354
254.84.156.177:330
236.29.84.0:144
98.17.112.196:311
198.193.204.236:349
173.217.155.212:141
205.185.115.138:443
114.107.92.111:339
Targets
-
-
Target
out.dll
-
Size
1.0MB
-
MD5
40cedc7e500033ef29be123ad0468020
-
SHA1
8582e273151c56dc4888bc590cdb0c884487eead
-
SHA256
c193c7ad0c5b19fc56c8a81ef11eb89efa6fa32c9091a12530bfc2d5ea14ca6a
-
SHA512
7718f821ecef9773bbe96ad7d069b41bed9bcd4c443092b58935fc7b560d0787ddfd1a277f29bfba5d66c6ded5b1bc34908847692c47493e2d19f193b0ec4633
-
SSDEEP
24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnw49Q:UetB7PBOf0F9Zx/9/y2YG9w
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger
-