27eec32524f00af06cd618a775ef6510ca6d53ab56a9ca5fa7f1d79674be9d1f | Triage

Analysis

max time kernel
33s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
31-08-2022 18:32

Sharing

Report Analysis Logs

General

Target

bumblebee_mem.dll
Size

1.0MB
MD5

d94d97088907942eab80e9d721cc74d4
SHA1

d30a5e340ca879ec6f523246a37c07c8292636e3
SHA256

27eec32524f00af06cd618a775ef6510ca6d53ab56a9ca5fa7f1d79674be9d1f
SHA512

6898ab5edf3fe5fd798f9922b4ab79cb0a57bbffd4e91b1e0e770c4d0783514cdfe0bd57f2c0955c686e423495a4c57b5bd5aafb87e74a21cdaf2cf92082fff2
SSDEEP

24576:cx2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZqeoc:kTCyWN9QQnq9Zx/ZgShrxtyqeo

Score

5^/10

Malware Config

Signatures

Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

pid	Process
1584	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bumblebee_mem.dll,#1
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
PID:1584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads