Analysis
-
max time kernel
125s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
01-09-2023 15:11
General
-
Target
0170c6a860c530c4bb9ee260c66bcf29d0fdf32c4297255f60c1785cdd1f2309_JC.exe
-
Size
1.2MB
-
MD5
23ee64fbcf7e71e80949ce10d30fcf64
-
SHA1
c55e8523f03e99a426df20bff67f5c6b2d0ea782
-
SHA256
0170c6a860c530c4bb9ee260c66bcf29d0fdf32c4297255f60c1785cdd1f2309
-
SHA512
36cc06193060757aa3fd81315d92d4c838a11a7bc56598fd31ddb5bc1fcecb24a2c16e34bb5177dd5d11d6e921f29c7ba0d2f5521cf6a99dff055180fac19c3c
-
SSDEEP
24576:CLxihC9BlhDSyjDuvBNSahcvpmeY427Ganl+:Cxi83DuqC6G/
Score
10/10
Malware Config
Extracted
Family
bumblebee
Botnet
NewGroup
rc4.plain
Signatures
-
BumbleBee
BumbleBee is a webshell malware written in C++.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0170c6a860c530c4bb9ee260c66bcf29d0fdf32c4297255f60c1785cdd1f2309_JC.exe"C:\Users\Admin\AppData\Local\Temp\0170c6a860c530c4bb9ee260c66bcf29d0fdf32c4297255f60c1785cdd1f2309_JC.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
488KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB