Overview

overview

10

Static

static

10

payload.dll

windows7-x64

10

payload.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    payload.bin

  • Size

    1.4MB

  • Sample

    230215-x42b7ade86

  • MD5

    12a99f8ae458862da2eddfb661ae7ced

  • SHA1

    f5f31414a29dac9e35888cd48a980d702f99fe70

  • SHA256

    7751a09b3c1146b5db72be1218287da6fd4c65813a1eb9ae5e0389db879daaeb

  • SHA512

    660032ffdb21aebda0ac30d363b198dab70187c3848c3e9c727f02b00e5ecd351bc85e1bd5b2fb4d568a90c2ce5ad2a058e20b42d0aaff4b12bcb46cfee58526

  • SSDEEP

    24576:g1GayIeFrnKgVGPCXr++xDTku+h5UZasJ2QfeFDXTZ9DztMa:ZQgVsCXfgu+h5UFpGFDN9D6a

Score
10/10
bumblebeehsyishsmqur_traits@_w@std@@@std@@@std@@trojan

Malware Config

Extracted

Family

bumblebee

Botnet

r_traits@_W@std@@@std@@@std@@

rc4.plain

Extracted

Family

bumblebee

Botnet

HsyIsHsmQu

rc4.plain

Targets

    • Target

      payload.bin

    • Size

      1.4MB

    • MD5

      12a99f8ae458862da2eddfb661ae7ced

    • SHA1

      f5f31414a29dac9e35888cd48a980d702f99fe70

    • SHA256

      7751a09b3c1146b5db72be1218287da6fd4c65813a1eb9ae5e0389db879daaeb

    • SHA512

      660032ffdb21aebda0ac30d363b198dab70187c3848c3e9c727f02b00e5ecd351bc85e1bd5b2fb4d568a90c2ce5ad2a058e20b42d0aaff4b12bcb46cfee58526

    • SSDEEP

      24576:g1GayIeFrnKgVGPCXr++xDTku+h5UZasJ2QfeFDXTZ9DztMa:ZQgVsCXfgu+h5UFpGFDN9D6a

    Score
    10/10
    bumblebeehsyishsmqutrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks