Extracted

Extracted

• • Target

    b3.msi

  • Size

    116.2MB

  • MD5

    d0e17863388ca516c2f400a40ed36c60

  • SHA1

    afb74843e1d4fa1308358efe54a3f55727240c03

  • SHA256

    9ab088aa97b858588bc10e9f45770515fd4e437f95b4171b6746ae55589261e9

  • SHA512

    c3226588152bbaa654c4e586bfe79e9a1b3eb8fac65cbd6042c0d252e5ccf83efe0e276de8525166bcd6b1ffd6f60826e6718075554befee5b30f88e7e137fd4

  • SSDEEP

    3145728:tcAqhqmGLNC7/Y37u2cXP26ZXSTMovMgw+MfkBgcEOE/TeSMymrZV9PC:Rqhqt8/Y/2E5JMlOE/a3TrZ

  Score

  10^/10

  bumblebeetr23103trojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2