bumblebee | outout[.]bin | Triage

Submit
Reports

Overview

overview

Static

static

outout.dll

windows7-x64

outout.dll

windows10-2004-x64

Resubmissions

09-10-2023 22:51

231009-2sy5xaha2t 10

19-04-2023 21:14

230419-z3esxafd2x 10

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

outout.dll

Resource

win7-20230220-en

bumblebee cis21704 trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

outout.dll

Resource

win10v2004-20230220-en

bumblebee cis21704 trojan

windows10-2004-x64

2 signatures

150 seconds

General

Target

outout.bin
Size

1.4MB
MD5

e7ee02d4c897e87048232a891e2a97f8
SHA1

36ee65e12cc044d99fd0654d8f4792910b1a3046
SHA256

39e300a5b4278a3ff5fe48c7fa4bd248779b93bbb6ade55e38b22de5f9d64c3c
SHA512

8b1ecdab172e44c61c9b86785da76297f0c3c7eb68755149e9ca14a64ef39c581ee05e39c2fc98861260eaef848b2e542b59f34ef6844d3ef27ef5f758351fa1
SSDEEP

24576:Eo10e/WhcerhA1HqikX3CUDA49JOOx2nP6c5P8hAlm3wKjHsElse:LUxhAxq7TDA4j7q55EhcGjHt

Score

10^/10

bumblebee

Malware Config

Signatures

Bumblebee family
bumblebee

Files

outout.bin
.dll windows x64

83f847006bcd9e79aedb74fc499583c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

StrToIntA
StrChrA
PathFindFileNameW

kernel32

VirtualFree
lstrcpyA
lstrcmpA
lstrcatA
GetProcAddress
FreeLibrary
VirtualAlloc
GetCurrentThread
GetCurrentThreadId
CloseHandle
GetModuleHandleW
VirtualProtectEx
LoadLibraryA
GetModuleHandleA
VirtualQuery
lstrlenA
VirtualQueryEx
GetCurrentProcess
UnmapViewOfFile

Exports

Exports

KFoVIxckwgVV
setPath

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy