Extracted

• • Target

    newfile111.xlsm

  • Size

    56KB

  • MD5

    cd67efd2d67af651b798ef6e345399de

  • SHA1

    cd83b6f54770e1a856852c153800cca0a5d84bce

  • SHA256

    b34459452ccc6dc19b432455779d3c881926f202d93158e846f94d979e9361e7

  • SHA512

    39749837c3b4c7d224db7e6d81e71401f3b9376c743956b9c3fc4f098276f42a50488db971587a8c193832524a372844ec5e1929ea8afd599acbded314a845af

  • SSDEEP

    768:KtntW3gxWpt1J3S5f3v4Jfa3ODVs3KnooaRHIuZVvFn8+5/LNSlC10MoE:itfxWLC5/wJi3eVsdtLVv15/9foE

  Score

  10^/10

  bumblebee0411rtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2