Overview

overview

10

Static

static

1

Contract_0...32.exe

windows7-x64

10

Contract_0...32.exe

windows10-2004-x64

10

Resubmissions

09/10/2023, 22:51

231009-2syjdaba3910

31/05/2023, 19:38

230531-ycf3lsaf6810

Sharing

Copy URL Twitter E-mail

General

  • Target
    Contract_02_21_Copy#32.exe
  • Size 1.4MB
  • Sample231009-2syjdaba39
  • SHA256 897e53b648020ab28663240bbbce54546cf6f55b35019fd4aa2a209c4a3b1832
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bumblebee21macatrojan

Malware Config

Extracted

Family

  • bumblebee

Botnet

  • 21maca

C2

  • 108.62.141.20:443

  • 104.168.140.145:443

  • 51.68.145.171:443

  • 108.62.118.170:443

  • 192.119.72.133:443

  • 23.108.57.201:443

rc4.plain

Targets

    • Target
      Contract_02_21_Copy#32.exe
    • Size 1.4MB
    • SHA256 897e53b648020ab28663240bbbce54546cf6f55b35019fd4aa2a209c4a3b1832
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks