General

  • Target

    2012-54-0x0000000001D00000-0x0000000001E74000-memory.dmp

  • Size

    1.5MB

  • MD5

    29ca66db117bba5c4614218930bd50a3

  • SHA1

    5810f2287a572114712da4b23f1bfb3444505430

  • SHA256

    018a7076aca3d4baee25cf85eaa4b46147da354bf62d939773b126c78a2d6d6c

  • SHA512

    edb37ed6f5e85dfeab280e888374a5dd909c9f55ae225295de6f77bbee493643e5e899e3bb8aa84681beb21aaf4c038ac7cfd6d7f7005f7fb7ac67c57423776d

  • SSDEEP

    24576:UJAx41SXU4LG5Vlcz8PBhNbJgwm9CEl9DAvOBddLfMVxpF3:20bG5Vyz8B9gwm95AAdhfUx

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

202lg

C2

104.168.157.253:443

209.141.40.19:443

107.189.5.17:443

23.254.167.63:443

91.206.178.234:443

146.19.173.86:443

103.175.16.104:443

194.135.33.85:443

173.234.155.246:443

51.68.144.43:443

172.86.120.111:443

160.20.147.242:443

51.75.62.204:443

205.185.113.34:443

194.135.33.184:443

23.82.140.155:443

185.173.34.35:443

rc4.plain

Signatures

Files

  • 2012-54-0x0000000001D00000-0x0000000001E74000-memory.dmp
    .dll windows x64


    Headers

    Sections