General

  • Target

    dd3ba736_7876e8dc0a06ab3ffd61d0b040327ac960d33543beafa2761b69b7b6c7935cec

  • Size

    1.1MB

  • MD5

    dd3ba73653522deb7b7bd760147b86ff

  • SHA1

    0166238f406ec79fb27eafc093d193fc85a0c32f

  • SHA256

    7876e8dc0a06ab3ffd61d0b040327ac960d33543beafa2761b69b7b6c7935cec

  • SHA512

    65861772604f2d5627ca8aff64c456aa09bc0835d7b60d560e228319464c42e9e75d2241a96a7f4e45feb305d476457f10a8659317f5ab0a6e39264e7d7d02b3

  • SSDEEP

    24576:J3U9FU5g/dAFCeycmdopdEfrVDN6kBDLQ9:k/OpycmYUpDN6kBv

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

146l

C2

141.98.168.70:443

103.175.16.107:443

146.70.124.77:443

154.56.0.100:443

194.135.33.16:443

185.62.58.209:443

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd3ba736_7876e8dc0a06ab3ffd61d0b040327ac960d33543beafa2761b69b7b6c7935cec
    .dll windows x64

    00b1bc1f0a0db461b47660df1defd1d0


    Headers

    Imports

    Exports

    Sections