Overview

overview

10

Static

static

3

e1.dll

windows7-x64

10

e1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1.dll.exe

  • Size

    2.5MB

  • Sample

    230621-pq62hshd74

  • MD5

    04889da884690bd296877a6a2453a715

  • SHA1

    235a8e9a16a4e963fb2c453cbb469ea3e1590da3

  • SHA256

    d1270e29d9a235bb456db76f5c88042eb06964145dd2b31f2ef87d5af1254e57

  • SHA512

    74875267c6b96ef6c44ac19021f96213cd115061f881b22d849ebc98aa21c92af64f46c86b908b2da53d3f6fe8d9e7bd291ce11882cff0d11bf1294a39c58cc2

  • SSDEEP

    49152:Z0wKKSxGGChwZr059ETh7eT4lPo39vRa0Kx6TGpJah:Z0AuYwpOW7Y4lPora0NMa

Score
10/10
bumblebeemsi11606trojan

Malware Config

Extracted

Family

bumblebee

Botnet

msi11606

C2

176.111.174.67:443

rc4.plain

Targets

    • Target

      e1.dll.exe

    • Size

      2.5MB

    • MD5

      04889da884690bd296877a6a2453a715

    • SHA1

      235a8e9a16a4e963fb2c453cbb469ea3e1590da3

    • SHA256

      d1270e29d9a235bb456db76f5c88042eb06964145dd2b31f2ef87d5af1254e57

    • SHA512

      74875267c6b96ef6c44ac19021f96213cd115061f881b22d849ebc98aa21c92af64f46c86b908b2da53d3f6fe8d9e7bd291ce11882cff0d11bf1294a39c58cc2

    • SSDEEP

      49152:Z0wKKSxGGChwZr059ETh7eT4lPo39vRa0Kx6TGpJah:Z0AuYwpOW7Y4lPora0NMa

    Score
    10/10
    bumblebeemsi11606trojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks