Overview

overview

10

Static

static

1

Contract_0...71.exe

windows7-x64

10

Contract_0...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Contract_02_21_Copy#71.exe

  • Size

    1.4MB

  • Sample

    230221-ytzw2sac3z

  • MD5

    3f046e46399bc21b0b4b4b8ab07d95e8

  • SHA1

    fb38039c8010d069b100dcfa0267fc6ba35b44e7

  • SHA256

    43c1f9f402f5450cdbc9bb6636dcec7c18015dff72923b765dc7d88050144dd6

  • SHA512

    8a255da5c7d8027e68be43efd84a2b0662c1d60b9aa23e49e554d54d4ca36f217dc208ce8078fcd255e8744132069f6a78f85d61c593da453f4027ed9eb56afa

  • SSDEEP

    24576:FYBj0OgTOaHEyqGrpCxt8L+3XarIp77XpvAnDZ03e44d:e/x+MnV7VdOr

Score
10/10
bumblebee21macatrojan

Malware Config

Extracted

Family

bumblebee

Botnet

21maca

C2

108.62.141.20:443

104.168.140.145:443

51.68.145.171:443

108.62.118.170:443

192.119.72.133:443

23.108.57.201:443
rc4.plain

Targets

    • Target

      Contract_02_21_Copy#71.exe

    • Size

      1.4MB

    • MD5

      3f046e46399bc21b0b4b4b8ab07d95e8

    • SHA1

      fb38039c8010d069b100dcfa0267fc6ba35b44e7

    • SHA256

      43c1f9f402f5450cdbc9bb6636dcec7c18015dff72923b765dc7d88050144dd6

    • SHA512

      8a255da5c7d8027e68be43efd84a2b0662c1d60b9aa23e49e554d54d4ca36f217dc208ce8078fcd255e8744132069f6a78f85d61c593da453f4027ed9eb56afa

    • SSDEEP

      24576:FYBj0OgTOaHEyqGrpCxt8L+3XarIp77XpvAnDZ03e44d:e/x+MnV7VdOr

    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks