General

  • Target

    3056-2-0x0000000001FD0000-0x00000000020DA000-memory.dmp

  • Size

    1.0MB

  • MD5

    d5cf76672d3b678e2a98597a514247e5

  • SHA1

    ada23c044814582478c9a7650a4f54ece945ce09

  • SHA256

    3808903aaeac34e716c303e4a28a9c8c5be7930719de80281f0c99980aa11a46

  • SHA512

    0346f17f0b340ed6fdcfe3c55cbc1c0fcc00c5261c1f2db0d42a19933afec2981eb2a860530bc7b7f31a38648158490445332bf2379077a33e202b164e53f16b

  • SSDEEP

    24576:9AZB4t8R+kvF+YcjkxL9Zx/NLkaZpLrPvIYh3z5xr0IW6:6vF+Ycw59Zx/NzrLrPgyVxr0IR

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

js1

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3056-2-0x0000000001FD0000-0x00000000020DA000-memory.dmp
    .dll windows x64


    Headers

    Sections