General
-
Target
LdrAddx64.dll
-
Size
1.1MB
-
Sample
220909-jglfkadfgn
-
MD5
78796148afc0a3218f4ce6c9aacc429c
-
SHA1
cd5c762a8ce9fb69bd24531de0588a689fe76f0e
-
SHA256
0b0a5f3592df7b538b8d8db4ba621b03896f27c9f112b88d56761972b03e6e58
-
SHA512
93cce3ceade3a0a5b353db486bf5119a257e0899b744737bc2b6d6313b8a0cb313059ecb106a3f072c1103129c73f76506fa2b753297cf8a3b4e8b342a4855da
-
SSDEEP
24576:nPbd7OXoxkXTfxUXIeUu3MWXA0FaRaayXd0:MocTxUXX35XbFivyX
Malware Config
Extracted
bumblebee
Extracted
bumblebee
1508
14.31.207.132:221
81.9.92.42:167
119.76.18.11:355
247.159.224.202:444
32.19.91.214:383
18.218.236.32:451
108.65.214.104:154
170.120.41.104:472
210.95.71.224:141
120.24.53.94:203
202.135.147.121:128
81.59.225.7:315
86.229.107.229:329
28.48.215.169:349
147.85.196.182:247
100.43.226.160:468
147.59.173.194:351
202.9.44.255:464
254.156.153.57:206
81.112.174.32:153
165.228.28.34:126
48.187.106.98:214
63.7.147.87:100
54.157.90.13:370
80.56.30.22:278
102.170.176.34:316
103.172.94.128:216
241.204.241.48:481
173.117.142.235:351
18.48.39.210:220
172.93.201.138:443
0.212.114.7:148
187.71.226.52:115
114.14.38.45:466
116.142.140.251:443
193.77.49.186:115
95.133.40.44:306
221.114.58.168:242
1.146.75.40:496
71.83.118.6:419
219.210.137.136:398
116.86.63.178:331
249.111.238.184:478
9.136.193.27:351
43.175.39.52:420
9.108.80.67:487
211.69.230.142:413
189.116.115.64:365
197.42.198.180:486
5.229.73.232:132
156.188.10.159:458
Targets
-
-
Target
LdrAddx64.dll
-
Size
1.1MB
-
MD5
78796148afc0a3218f4ce6c9aacc429c
-
SHA1
cd5c762a8ce9fb69bd24531de0588a689fe76f0e
-
SHA256
0b0a5f3592df7b538b8d8db4ba621b03896f27c9f112b88d56761972b03e6e58
-
SHA512
93cce3ceade3a0a5b353db486bf5119a257e0899b744737bc2b6d6313b8a0cb313059ecb106a3f072c1103129c73f76506fa2b753297cf8a3b4e8b342a4855da
-
SSDEEP
24576:nPbd7OXoxkXTfxUXIeUu3MWXA0FaRaayXd0:MocTxUXX35XbFivyX
-
Suspicious use of NtCreateThreadExHideFromDebugger
-