Overview

overview

10

Static

static

3

29285e43-b...ab.pdf

windows10-2004-x64

10

Resubmissions

11-03-2023 04:52

230311-fhegvsge92 10

23-02-2023 14:16

230223-rk66fahh7y 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29285e43-b60a-4fbc-9522-e0b025a378ab.pdf

  • Size

    133KB

  • Sample

    230311-fhegvsge92

  • MD5

    1c103213bcd7198d214b8d4aed867530

  • SHA1

    100ebe5d7590d1a5cfba87d8b4e0e5d39f5bd6b3

  • SHA256

    7c05bdc592b35f77d3f9404a0982fc7fa3dfad50d199c16e0b4467d126bc156c

  • SHA512

    2da726ae22ba47ce28ec4b136cf84b7665e63d7f6e5dea4258a91d40470a89410101adfac9973c04da6e098f76f9e4fa5bb22a5ed1f7d4b4a51f5d65bed8c01a

  • SSDEEP

    3072:Tgr2ZLPOklYwx1ltPSg90LsxaVJz5bBd9Z/UDe:8krxXfzyvVJlBFcDe

Score
10/10
bumblebee21macalinkpdftrojan

Malware Config

Extracted

Family

bumblebee

Botnet

21maca

C2

108.62.141.20:443

104.168.140.145:443

51.68.145.171:443

108.62.118.170:443

192.119.72.133:443

23.108.57.201:443
rc4.plain

Targets

    • Target

      29285e43-b60a-4fbc-9522-e0b025a378ab.pdf

    • Size

      133KB

    • MD5

      1c103213bcd7198d214b8d4aed867530

    • SHA1

      100ebe5d7590d1a5cfba87d8b4e0e5d39f5bd6b3

    • SHA256

      7c05bdc592b35f77d3f9404a0982fc7fa3dfad50d199c16e0b4467d126bc156c

    • SHA512

      2da726ae22ba47ce28ec4b136cf84b7665e63d7f6e5dea4258a91d40470a89410101adfac9973c04da6e098f76f9e4fa5bb22a5ed1f7d4b4a51f5d65bed8c01a

    • SSDEEP

      3072:Tgr2ZLPOklYwx1ltPSg90LsxaVJz5bBd9Z/UDe:8krxXfzyvVJlBFcDe

    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks