Analysis
-
max time kernel
128s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
13-09-2023 12:19
General
-
Target
123.exe
-
Size
594KB
-
MD5
2e62508bc70738e798b5e87ab5dbb60a
-
SHA1
61afa4c74128e347827257e1e462ad7a6dcd1fac
-
SHA256
89d331146ec44ec1951f4d2327c4f0db07f55648f3ebf81a7b8932ccf7c4dc62
-
SHA512
2a7ec96612ec9b527eaf8f3c76866f2465637acdcf76684cc1a48372dd5c98d8ffa2642cdca5ee03cf0229328afc9684ec9212cd2ea6ca0dcf8175ba50c8c66e
-
SSDEEP
12288:u/gK0kdUib8B5nym1WKpzz9r5ZudRiRU6TggekryGk:uXnUB5nyAhkdRiW6TgnkB
Score
10/10
Malware Config
Extracted
Family
bumblebee
Botnet
lnk1
rc4.plain
Signatures
-
BumbleBee
BumbleBee is a webshell malware written in C++.
Processes
-
C:\Users\Admin\AppData\Local\Temp\123.exe"C:\Users\Admin\AppData\Local\Temp\123.exe"1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\AppData\Local\Temp\123.exe"C:\Users\Admin\AppData\Local\Temp\123.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
436KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB