General
-
Target
bumblebeepayload.txt
-
Size
1.1MB
-
Sample
220824-z2pxgscah9
-
MD5
1b83c062f95066dbbb9a11e10dbef1da
-
SHA1
13d59b078eb8e200ea398038550441cd5a844c8a
-
SHA256
1b26c2a0a53fb807a0decf7118704ca03a1eb1728e29c4f84f9886ca8ab1f021
-
SHA512
5b2bc43dbf0d06570739081413e3e46d5d2012eaef9ce71f04b53aeff6eccb826c74d7cc3724fd158ad5cd738441091ea09087056cd06c21358986c8973626e7
-
SSDEEP
24576:S5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnw49Q:0etB7PBOf0F9Zx/9/y2YG9w
Behavioral task
behavioral1
Sample
bumblebeepayload.dll
Resource
win7-20220812-en
Malware Config
Extracted
bumblebee
Extracted
bumblebee
2408
108.30.109.238:341
107.21.49.73:412
212.227.199.94:119
26.88.252.40:148
217.243.85.139:190
50.20.147.145:346
115.58.47.223:480
150.158.205.226:428
222.132.86.189:463
112.102.174.20:379
94.49.121.33:341
131.233.140.11:104
85.118.251.137:412
183.89.9.91:295
219.98.254.216:386
33.218.244.230:266
29.167.160.212:332
78.193.54.213:166
86.214.84.193:173
98.206.43.235:371
69.178.215.238:452
139.221.92.16:250
121.232.4.189:486
41.13.84.228:481
20.228.65.94:319
100.29.163.95:141
125.118.83.42:384
152.176.82.140:269
108.157.59.172:183
239.91.7.251:266
48.192.227.189:212
105.160.138.197:201
254.253.238.214:473
167.30.25.114:450
10.137.202.46:333
198.98.59.64:443
92.236.128.103:401
24.123.2.198:217
45.147.229.47:443
94.154.149.175:121
145.226.93.229:399
117.77.158.162:433
206.12.40.143:333
105.111.151.74:373
109.215.60.10:137
85.117.103.166:354
254.84.156.177:330
236.29.84.0:144
98.17.112.196:311
198.193.204.236:349
173.217.155.212:141
205.185.115.138:443
114.107.92.111:339
Targets
-
-
Target
bumblebeepayload.txt
-
Size
1.1MB
-
MD5
1b83c062f95066dbbb9a11e10dbef1da
-
SHA1
13d59b078eb8e200ea398038550441cd5a844c8a
-
SHA256
1b26c2a0a53fb807a0decf7118704ca03a1eb1728e29c4f84f9886ca8ab1f021
-
SHA512
5b2bc43dbf0d06570739081413e3e46d5d2012eaef9ce71f04b53aeff6eccb826c74d7cc3724fd158ad5cd738441091ea09087056cd06c21358986c8973626e7
-
SSDEEP
24576:S5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnw49Q:0etB7PBOf0F9Zx/9/y2YG9w
-
Suspicious use of NtCreateThreadExHideFromDebugger
-