Overview

overview

10

Static

static

3

9.exe

windows7-x64

10

9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9.exe

  • Size

    596KB

  • Sample

    230907-w72xfsch81

  • MD5

    0d73a7a18577fa6c81d0ccbe6a92261e

  • SHA1

    50012f0552e00b6055e486ee0ec43fed9f76ef79

  • SHA256

    cc9d10b98fd094d95ce155a5815e039a3eb6f3545708564c09e27834dc3768ab

  • SHA512

    a82632e99848b819d80e5d1327033b0fd00f8a608e960882bf8e90c8b62fefba823c53fa0514746b822ad3ed54bb946ead29d935a296f0a39e2d44b32075955f

  • SSDEEP

    12288:9rwVav5KOhU9lPu2OSTXbIdmRzAtI2mghQhyv2udR:9gahKOhU9tNXuXmgy6

Score
10/10
bumblebeelnk1trojan

Malware Config

Extracted

Family

bumblebee

Botnet

lnk1

rc4.plain

Targets

    • Target

      9.exe

    • Size

      596KB

    • MD5

      0d73a7a18577fa6c81d0ccbe6a92261e

    • SHA1

      50012f0552e00b6055e486ee0ec43fed9f76ef79

    • SHA256

      cc9d10b98fd094d95ce155a5815e039a3eb6f3545708564c09e27834dc3768ab

    • SHA512

      a82632e99848b819d80e5d1327033b0fd00f8a608e960882bf8e90c8b62fefba823c53fa0514746b822ad3ed54bb946ead29d935a296f0a39e2d44b32075955f

    • SSDEEP

      12288:9rwVav5KOhU9lPu2OSTXbIdmRzAtI2mghQhyv2udR:9gahKOhU9tNXuXmgy6

    Score
    10/10
    bumblebeelnk1trojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks