General

  • Target

    15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7.zip

  • Size

    647KB

  • Sample

    231009-2mty1agh7v

  • MD5

    5ca6a9255f572d79acde3a20a3578473

  • SHA1

    7e4c79d060ff45555c47a8c0f13e87a545c207e9

  • SHA256

    b84cea4777322995e2cdbeb7e2031519330941358f3fad0ae403e48b36650eae

  • SHA512

    e146fe494136c0317f4cef1d607039f08891d726447f17adc4302d6e82ba8c6b6bb5020b048385cd73339d6ecf8a5d53fb66b5659896ea83c04343b1aedeaeb9

  • SSDEEP

    12288:0vtdSsePvWAmOznibtcheWc+ZI2aCJ2iPWBa//rIYtTveYdURn3BK7Ape8cOt/xB:AfSjPvWBOGbt6ehXEJbWQMYJveAUR3Bp

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

lg1010

rc4.plain

Targets

    • Target

      15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7.zip

    • Size

      647KB

    • MD5

      5ca6a9255f572d79acde3a20a3578473

    • SHA1

      7e4c79d060ff45555c47a8c0f13e87a545c207e9

    • SHA256

      b84cea4777322995e2cdbeb7e2031519330941358f3fad0ae403e48b36650eae

    • SHA512

      e146fe494136c0317f4cef1d607039f08891d726447f17adc4302d6e82ba8c6b6bb5020b048385cd73339d6ecf8a5d53fb66b5659896ea83c04343b1aedeaeb9

    • SSDEEP

      12288:0vtdSsePvWAmOznibtcheWc+ZI2aCJ2iPWBa//rIYtTveYdURn3BK7Ape8cOt/xB:AfSjPvWBOGbt6ehXEJbWQMYJveAUR3Bp

    Score
    1/10
    • Target

      15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7.exe

    • Size

      894KB

    • MD5

      a4e4f8966796845079ca6b853fd1899d

    • SHA1

      25906943d58610a2208c9312c555dee7eb16952e

    • SHA256

      15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

    • SHA512

      22df60f5d457cca829aa86f708d6df492aa8acf794dbaed5bfac06b3f6fcbd7a331139c92465a9e5ec57232b76102b26ba593e527266709fd225ca15a3c3045a

    • SSDEEP

      12288:1hPALJCb+JI7GB5ShQUO3wY6Wpg8qvtN2FCOWPZzMe0n28qX2Y5aIv/86PaeAkYT:1hum+JI/jO3z6WStlFq4Gd66PybS

    Score
    10/10
    • BumbleBee

      BumbleBee is a webshell malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks