Extracted

• • Target

    features.dll

  • Size

    1.1MB

  • MD5

    0754f0df91f71d2e36f234c3852b157b

  • SHA1

    6af19eb260bae0f01d13e6d618d93d63eb82d7c5

  • SHA256

    c9eb997b9af05af641a3708b006e34e6a9a4e7755fca72205cd187110375e7ac

  • SHA512

    f944a79b5852c7b8280dc479e2d4fd06bb09bbdb566bc5cbb4dc8340477204139ec4b9b0acbee3b7e3a3b2bc73f869f1e1d691690a35c9e9f711ab17e43f9deb

  • SSDEEP

    24576:UxhinDzFYOcJpi16vsYSPN93IlZn3oCwg8LKMYL31IQNV:6iDnYc16vJO9QoC1M2N

  Score

  3^/10
  behavioral1behavioral2

• • Target

    math.bat

  • Size

    1KB

  • MD5

    ae315719f9e410b80ae2c059483ae3ad

  • SHA1

    aaea22f5d865f44d904f344d82f125455d4c87ef

  • SHA256

    f7a5e8aa213fc7cab3428f935c73e54fa5f7af07c118cb8355edaf02ebaef749

  • SHA512

    097c721573bb6673e359ab487e46610f3bdcb767b5161d78f7cd1413136b35562294b9333421966104ba730ba18b1f12bf9f6ead9c340c5f082f81b3b9b25471

  Score

  10^/10

  bumblebee102lgtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral3behavioral4

• • Target

    project information.lnk

  • Size

    975B

  • MD5

    c6b475cbf0af53b086df880b42c21409

  • SHA1

    e8aa3b7fc99e14f92bf369efdac3f2b558914915

  • SHA256

    ae981b4dd9a5b4a4d8a21250244216dc7e9ac03bd54048527f31d3554b66fad1

  • SHA512

    8a9031fb1f0238c92ebf6d432b950c7f806dbb085a288f6bc0c120ff9f779a670169c320aac48784cad64b235fee845bc1e04037f18dbeb2dc5a3fcf30397dc7

  Score

  10^/10

  bumblebee102lgtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral5behavioral6