Overview

overview

10

Static

static

3

0.exe

windows7-x64

10

0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0.exe

  • Size

    596KB

  • Sample

    230907-x5v7kade45

  • MD5

    daf9c4f8fe9b58a871cbcebe7bece182

  • SHA1

    abd10f1a4dba540a79f8dc9aca00f8da7b0df848

  • SHA256

    37309d308a84d51e829148dbf54d72c8e8bcd4523a2f926fd633cb1b7ddc2e9d

  • SHA512

    9c5c2f0c2101d764e349b2de875790455972c3ead57505ad8364ec2fbd09e055bcdaea6bdbc068e75d3aedf5c60c22a791ff6326db99530d0e8f418987e5fd1a

  • SSDEEP

    12288:Lg/fe/kqaXAc0WjDMWLUmTlRWKhtpByXMCROa6:sX1fXALqjRzhtiM4Oa6

Score
10/10
bumblebeelnk1trojan

Malware Config

Extracted

Family

bumblebee

Botnet

lnk1

rc4.plain

Targets

    • Target

      0.exe

    • Size

      596KB

    • MD5

      daf9c4f8fe9b58a871cbcebe7bece182

    • SHA1

      abd10f1a4dba540a79f8dc9aca00f8da7b0df848

    • SHA256

      37309d308a84d51e829148dbf54d72c8e8bcd4523a2f926fd633cb1b7ddc2e9d

    • SHA512

      9c5c2f0c2101d764e349b2de875790455972c3ead57505ad8364ec2fbd09e055bcdaea6bdbc068e75d3aedf5c60c22a791ff6326db99530d0e8f418987e5fd1a

    • SSDEEP

      12288:Lg/fe/kqaXAc0WjDMWLUmTlRWKhtpByXMCROa6:sX1fXALqjRzhtiM4Oa6

    Score
    10/10
    bumblebeelnk1trojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks