Behavioral task
behavioral1
Sample
1108-54-0x0000000000610000-0x0000000000771000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1108-54-0x0000000000610000-0x0000000000771000-memory.dll
Resource
win10v2004-20230221-en
General
-
Target
1108-54-0x0000000000610000-0x0000000000771000-memory.dmp
-
Size
1.4MB
-
MD5
746637f41aba9567e114040286ef7e5d
-
SHA1
7f31849399db38efa77ac8d9e2764b0e0ab79a36
-
SHA256
d6a698f7573c2c3155e103e605a876bdbabb6ebbf524a9ac25658a061faeb1a1
-
SHA512
3a0ab68e1b8d31268bb3d43d5b4a73dadf5820dda51f0b17383383940fb1b9fdf3d45d7aec4b01861ff8c675af6a8f5bc75b066ce837b0073865187ea27dd040
-
SSDEEP
24576:sVww2eTfP/jLWdI2rAoh0yB9Zx///Axl8ArPhp6LwFLUq:Y/PWdrAohB9Zx/gj8aPqLwF
Malware Config
Extracted
bumblebee
17maca
108.62.141.20:443
23.108.57.201:443
108.62.118.170:443
Signatures
-
Bumblebee family
Files
-
1108-54-0x0000000000610000-0x0000000000771000-memory.dmp.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ