General

  • Target

    532-2-0x00000000005A0000-0x00000000006A7000-memory.dmp

  • Size

    1.0MB

  • MD5

    9d870bae82f799b6742b8b2634a7dc2e

  • SHA1

    e792a031468fb08ff84d41a567dbdd1fa5f320f9

  • SHA256

    61bc20d7c7a9ec2a669cb474a178e9cc2ece0eb7d326c43f4f4c612d6263e173

  • SHA512

    dbdc889c7eb6c5eea01b60593ec9f27fddaaf09dc1a5d928b6e6356bece2dd55ff1e5f8f12873a4387b52e94e7c0405ea31051762b2052a2bbd0250b68f4c703

  • SSDEEP

    24576:tAZBB0pE2CwPwsqqSUZ57pBloBRh3cUjCYWF:pecDqqSOvloB3lj1+

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

lnk1

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 532-2-0x00000000005A0000-0x00000000006A7000-memory.dmp
    .exe windows x64


    Headers

    Sections