Extracted

• • Target

    21518b72a38ce7cadd7a8d378c7a0ce64b8902293395cb3473f20955de615b49.dll

  • Size

    1.1MB

  • MD5

    347f3b70470e745d129d22c4497613f2

  • SHA1

    daa009dd042be35a27cbdf030490095b0a34fbea

  • SHA256

    21518b72a38ce7cadd7a8d378c7a0ce64b8902293395cb3473f20955de615b49

  • SHA512

    c956115898b085535780c8791099a12b60a8050c3ad5536c5e486db29c18e13c706329e259355e197fb94493575990952295f2b0b9c9ebeb80788c048a083b0e

  • SSDEEP

    24576:m36bYNlX4Y64TrO2CFriuKmykVq169HdK3AorTHMxsdRa:TYNxp64OHBqs5oPHh

  Score

  10^/10

  bumblebee102lgtrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Blocklisted process makes network request

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2