Extracted

• • Target

    bum_0109.bin

  • Size

    1.1MB

  • MD5

    7505f06d4c671c572f550cba3d34e2ea

  • SHA1

    e59a8fd2d359443e11f94417f53cc9333dd8cfc7

  • SHA256

    34781ec029c522322a117d0aee0de90eb6bb9f80f2c640c84f16ec6809f5723a

  • SHA512

    5320d4fcd16088e42950907fa9109d0e7b8472676b8bd080d9e481ba6114c053ccbafa16122b4e6142ea2fe31ef05413f1a4094bb4d31597278ba7c053076e25

  • SSDEEP

    24576:9x2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZfeoO:RTCyWN9QQnq9Zx/ZgShrxtyfeo

  Score

  10^/10

  bumblebee0109trojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2