Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a4af4996a5f1c091cde6b18907c08fe31f373d7477d2f524161a45d130a1fac

  • Size

    966KB

  • Sample

    221108-tvgpmshddl

  • MD5

    6e780435da8461940fc822f31b7368d2

  • SHA1

    1f9467a1495ee143588e9b53f0a5b1ebe311d4b5

  • SHA256

    0a4af4996a5f1c091cde6b18907c08fe31f373d7477d2f524161a45d130a1fac

  • SHA512

    76d9bf6522278d9b9d7f3979bccbb894684cea1e87c034fcd71860e969fc367f6a7a42f67184296cdeb5f77a2893c307868f8bd0f6c4d0f548a09549b05833fe

  • SSDEEP

    12288:+s+DiK3N/x/8rwMAImFetO29Qvnr7iL7/FXQ6e4HP5kGpmaJTWPa5bi5pguM649J:+FgxAIyDvn9kqCtwWi5iukff

Score
10/10
bumblebee0311t2trojan

Malware Config

Extracted

Family

bumblebee

Botnet

0311t2

C2

39.65.8.170:443

103.144.139.156:443

107.189.30.231:443

91.245.254.101:443

194.135.33.127:443
rc4.plain

Targets

    • Target

      0a4af4996a5f1c091cde6b18907c08fe31f373d7477d2f524161a45d130a1fac

    • Size

      966KB

    • MD5

      6e780435da8461940fc822f31b7368d2

    • SHA1

      1f9467a1495ee143588e9b53f0a5b1ebe311d4b5

    • SHA256

      0a4af4996a5f1c091cde6b18907c08fe31f373d7477d2f524161a45d130a1fac

    • SHA512

      76d9bf6522278d9b9d7f3979bccbb894684cea1e87c034fcd71860e969fc367f6a7a42f67184296cdeb5f77a2893c307868f8bd0f6c4d0f548a09549b05833fe

    • SSDEEP

      12288:+s+DiK3N/x/8rwMAImFetO29Qvnr7iL7/FXQ6e4HP5kGpmaJTWPa5bi5pguM649J:+FgxAIyDvn9kqCtwWi5iukff

    Score
    10/10
    bumblebee0311t2trojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks