General
-
Target
out.dll
-
Size
1.0MB
-
Sample
220901-yb6xmsccb8
-
MD5
0c8ef56d0e023dc3fcff82f85a942bc7
-
SHA1
d1ef37a9997f3df7c00b42a5b77cf5d7e273be16
-
SHA256
1f9e55d62093ddcf81cf26088a3fcbda001cf76bae9ab57ad14c6875ebdcec5b
-
SHA512
7315e71f47537605ad2ff7daa044ed7456af5c9aaa935f641b7116c0c8c8086909ea457f752e25c823fbf9f9391749872b5bae44bc5f9c9e75dc5393a5ca572f
-
SSDEEP
24576:cx2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZfeoX:kTCyWN9QQnq9Zx/ZgShrxtyfeo
Behavioral task
behavioral1
Sample
out.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
out.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
bumblebee
0109
3.96.133.190:425
2.64.146.54:483
146.19.173.173:443
124.190.135.42:475
171.85.18.1:171
167.3.253.206:327
105.221.217.130:420
87.205.249.98:424
34.125.112.132:378
241.107.31.54:327
232.8.38.144:246
52.70.202.153:421
248.233.210.1:241
35.198.208.19:401
168.185.24.232:389
157.82.90.180:269
118.175.154.106:167
144.90.37.132:300
198.98.52.145:443
62.226.23.100:125
241.221.241.108:297
172.209.40.47:498
128.224.102.9:484
17.18.123.193:368
191.120.155.22:148
35.237.47.84:247
40.203.155.225:463
9.126.197.166:240
44.124.142.232:351
172.58.198.65:158
174.115.51.232:322
130.122.90.200:280
44.130.196.39:469
193.183.54.47:159
57.253.133.38:163
59.206.6.232:394
237.64.71.131:287
225.248.109.158:333
122.253.239.13:224
124.50.99.227:169
139.187.125.8:306
102.15.123.118:284
158.171.115.18:222
135.172.209.229:167
173.26.145.88:439
45.119.182.5:395
87.182.85.155:318
97.59.143.131:368
115.22.163.66:189
165.107.81.255:236
45.147.230.233:443
22.24.25.231:151
154.210.216.13:471
Targets
-
-
Target
out.dll
-
Size
1.0MB
-
MD5
0c8ef56d0e023dc3fcff82f85a942bc7
-
SHA1
d1ef37a9997f3df7c00b42a5b77cf5d7e273be16
-
SHA256
1f9e55d62093ddcf81cf26088a3fcbda001cf76bae9ab57ad14c6875ebdcec5b
-
SHA512
7315e71f47537605ad2ff7daa044ed7456af5c9aaa935f641b7116c0c8c8086909ea457f752e25c823fbf9f9391749872b5bae44bc5f9c9e75dc5393a5ca572f
-
SSDEEP
24576:cx2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZfeoX:kTCyWN9QQnq9Zx/ZgShrxtyfeo
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger
-