Overview

overview

10

Static

static

3

d242528e-1...ba.pdf

windows10-2004-x64

10

Resubmissions

11-03-2023 04:49

230311-ffwclaad2s 10

23-02-2023 14:15

230223-rky5tshh7s 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d242528e-1bc5-45e6-93f0-d24f4cb35bba.pdf

  • Size

    138KB

  • Sample

    230311-ffwclaad2s

  • MD5

    097756aa3d5a8ede52623e37cde154b3

  • SHA1

    84aad7a61af60b0b1daf7f2c6de8b97bce971df6

  • SHA256

    11d0cb3739f9e23e917ef664d523eb1cc399737ef1864906e37d86b6bf0b7010

  • SHA512

    e45d93d4ee1e4706176734fe9f67ec5dc97828a9dad33b5c4520e30e53e077f1047cf58aab192a2fcfdc2032595b0fcf73887791b8d7b67e8b488b0def5a5808

  • SSDEEP

    3072:zU7lfRXEXR1q8ZHXLKOH5kcRY+L+3rLC4OgMs2:KpUXR1n7KOH5lRYIgr1l12

Score
10/10
bumblebee21macalinkpdftrojan

Malware Config

Extracted

Family

bumblebee

Botnet

21maca

C2

108.62.141.20:443

104.168.140.145:443

51.68.145.171:443

108.62.118.170:443

192.119.72.133:443

23.108.57.201:443
rc4.plain

Targets

    • Target

      d242528e-1bc5-45e6-93f0-d24f4cb35bba.pdf

    • Size

      138KB

    • MD5

      097756aa3d5a8ede52623e37cde154b3

    • SHA1

      84aad7a61af60b0b1daf7f2c6de8b97bce971df6

    • SHA256

      11d0cb3739f9e23e917ef664d523eb1cc399737ef1864906e37d86b6bf0b7010

    • SHA512

      e45d93d4ee1e4706176734fe9f67ec5dc97828a9dad33b5c4520e30e53e077f1047cf58aab192a2fcfdc2032595b0fcf73887791b8d7b67e8b488b0def5a5808

    • SSDEEP

      3072:zU7lfRXEXR1q8ZHXLKOH5kcRY+L+3rLC4OgMs2:KpUXR1n7KOH5lRYIgr1l12

    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks