Behavioral task
behavioral1
Sample
2000-54-0x0000000000580000-0x00000000006E1000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2000-54-0x0000000000580000-0x00000000006E1000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
2000-54-0x0000000000580000-0x00000000006E1000-memory.dmp
-
Size
1.4MB
-
MD5
de1d9987cc2968f40f3b6820204dc0d5
-
SHA1
3baf6c5fa3bbc062cff9039f1eb32dfd02f59070
-
SHA256
0b45741a0500a408650f96532e1b52c9a661b4fe4d6bd008b5028a4a12dca814
-
SHA512
c9dea1d7a482f111b691069103e92a723f0c677ec20ce23b10fdade44a4b5bc4693f37ca148614920b342fe5e431b8dc7f3f00817d59994d6309e0c35b432b98
-
SSDEEP
24576:sVww2eTfP/jLWdI2rAoh0yB9Zx///Axl8ArPhpqIwFLdq:Y/PWdrAohB9Zx/gj8aPWIwF
Malware Config
Extracted
bumblebee
17maca
108.62.141.20:443
23.108.57.201:443
108.62.118.170:443
Signatures
-
Bumblebee family
Files
-
2000-54-0x0000000000580000-0x00000000006E1000-memory.dmp.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ