Extracted

• • Target

    Setup_Win_21-02-2023_16-12-26.exe

  • Size

    940KB

  • MD5

    1990576c1cc7270e841955ee847917ed

  • SHA1

    6a1bdc104349419f7f103407ab43451f0d2e5db2

  • SHA256

    a8a25ee71c0e8e4a06cd1573271672b871f78eba5f41803ffda6f14006c81803

  • SHA512

    5af0f72faf2577ebe1774be32529e6c922b80577d10695706470d7ae5ef8cb482650889e75b7a27bf73c9b45d58d82ae1e1591579155e7494033a4339507013b

  • SSDEEP

    12288:nwqAuOKfZ2j/7LB3qy/lj41q/ypBmP0WbLVgk/6oQZrvXwkr9kqTDPgTzJm:nwoOZl6SJ5vBbXit5xETzJm

  Score

  10^/10

  bumblebee17macatrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2