Extracted

• • Target

    Document_2173_Scan_(Nov8).html

  • Size

    1.8MB

  • MD5

    74883888d9279c414e01db7e654306c2

  • SHA1

    a4a22d336b6fdf9adccedf7518a0013d2622e36f

  • SHA256

    08d93a2201ddb766209a9a6adf88c377a2617a6d963bd408c3dabe92ae8b9b5e

  • SHA512

    ae4757db86561c4085ef291e33691a18e6375cbbf100dfd7aeb8533ea937d8c41e0f0a8b7410904ea183e904701edd590416744322b9f2f6ed4e1e68f37ce8de

  • SSDEEP

    24576:F2XNH1C8Q24r4xUL4/tcE9rhEfzA9n3UX7lGFPvvQjouYabAXgBlgbqRWuDLe:M9VCHQWmlojouldBl9RWue

  Score

  10^/10

  bumblebee0811rtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Blocklisted process makes network request

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2