Extracted

• • Target

    Document#8375.html

  • Size

    1.4MB

  • MD5

    ab6a29ba7e9af6e88eaf598b9dc9f007

  • SHA1

    9b2b4dff41da2076684a85c844b51830250f93f9

  • SHA256

    dc8d175181567c20a63fc560a65693eaa619a4e19507c3bf489e41b9291949bf

  • SHA512

    4d917125fa600391bfb2b78cc13cd464128e1d1b00215874b05a6b9b5ec6c5ee9a5094648bebaea60ac7310806550d40c06e525f423766c0d172e5838f67d810

  • SSDEEP

    24576:y80RC+iQXb11xsHj33Mp8iiG4s0ckOG2gRNj3o7JoJ5fHmXq:6Gobe3dH/nOrO9EWJFHB

  Score

  10^/10

  bumblebee0211rtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2