Extracted

• • Target

    d1270e29d9a235bb456db76f5c88042eb06964145dd2b31f2ef87d5af1254e57.exe

  • Size

    2.5MB

  • MD5

    04889da884690bd296877a6a2453a715

  • SHA1

    235a8e9a16a4e963fb2c453cbb469ea3e1590da3

  • SHA256

    d1270e29d9a235bb456db76f5c88042eb06964145dd2b31f2ef87d5af1254e57

  • SHA512

    74875267c6b96ef6c44ac19021f96213cd115061f881b22d849ebc98aa21c92af64f46c86b908b2da53d3f6fe8d9e7bd291ce11882cff0d11bf1294a39c58cc2

  • SSDEEP

    49152:Z0wKKSxGGChwZr059ETh7eT4lPo39vRa0Kx6TGpJah:Z0AuYwpOW7Y4lPora0NMa

  Score

  10^/10

  bumblebeemsi11606trojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2