Extracted

• • Target

    SecuriteInfo.com.Variant.Lazy.260674.15559.6004.exe

  • Size

    966KB

  • MD5

    6e780435da8461940fc822f31b7368d2

  • SHA1

    1f9467a1495ee143588e9b53f0a5b1ebe311d4b5

  • SHA256

    0a4af4996a5f1c091cde6b18907c08fe31f373d7477d2f524161a45d130a1fac

  • SHA512

    76d9bf6522278d9b9d7f3979bccbb894684cea1e87c034fcd71860e969fc367f6a7a42f67184296cdeb5f77a2893c307868f8bd0f6c4d0f548a09549b05833fe

  • SSDEEP

    12288:+s+DiK3N/x/8rwMAImFetO29Qvnr7iL7/FXQ6e4HP5kGpmaJTWPa5bi5pguM649J:+FgxAIyDvn9kqCtwWi5iukff

  Score

  10^/10

  bumblebee0311t2trojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Blocklisted process makes network request

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2