Overview

overview

10

Static

static

10

outout.dll

windows7-x64

10

outout.dll

windows10-2004-x64

10

Resubmissions

09-10-2023 22:51

231009-2sy5xaha2t 10

19-04-2023 21:14

230419-z3esxafd2x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    outout.bin

  • Size

    1.4MB

  • Sample

    230419-z3esxafd2x

  • MD5

    e7ee02d4c897e87048232a891e2a97f8

  • SHA1

    36ee65e12cc044d99fd0654d8f4792910b1a3046

  • SHA256

    39e300a5b4278a3ff5fe48c7fa4bd248779b93bbb6ade55e38b22de5f9d64c3c

  • SHA512

    8b1ecdab172e44c61c9b86785da76297f0c3c7eb68755149e9ca14a64ef39c581ee05e39c2fc98861260eaef848b2e542b59f34ef6844d3ef27ef5f758351fa1

  • SSDEEP

    24576:Eo10e/WhcerhA1HqikX3CUDA49JOOx2nP6c5P8hAlm3wKjHsElse:LUxhAxq7TDA4j7q55EhcGjHt

Score
10/10
bumblebeecis21704trojan

Malware Config

Extracted

Family

bumblebee

Botnet

cis21704

C2

149.3.170.185:443

192.254.79.106:443

103.175.16.149:443

23.108.57.117:443

209.141.58.129:443

21.253.40.63:443

199.195.249.67:443
rc4.plain

Targets

    • Target

      outout.bin

    • Size

      1.4MB

    • MD5

      e7ee02d4c897e87048232a891e2a97f8

    • SHA1

      36ee65e12cc044d99fd0654d8f4792910b1a3046

    • SHA256

      39e300a5b4278a3ff5fe48c7fa4bd248779b93bbb6ade55e38b22de5f9d64c3c

    • SHA512

      8b1ecdab172e44c61c9b86785da76297f0c3c7eb68755149e9ca14a64ef39c581ee05e39c2fc98861260eaef848b2e542b59f34ef6844d3ef27ef5f758351fa1

    • SSDEEP

      24576:Eo10e/WhcerhA1HqikX3CUDA49JOOx2nP6c5P8hAlm3wKjHsElse:LUxhAxq7TDA4j7q55EhcGjHt

    Score
    10/10
    bumblebeecis21704trojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks