Resubmissions

16/10/2023, 02:56

231016-de79nadd7510

09/10/2023, 22:51

231009-2szfnsba4310

05/04/2023, 07:15

230405-h3fxjacc8510

General

  • Target
    inst1.exe
  • Size 1.6MB
  • Sample231009-2szfnsba43
  • SHA256 35f2ec59313bbe5b78e4b043f06f8961f6f3e77b870544d15ee7cc1fca987d8c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • bumblebee

Botnet
  • inst

C2
  • 194.15.216.247:443

  • 23.106.215.141:443

  • 104.168.244.96:443

  • 51.83.255.85:443

  • 192.119.81.86:443

rc4.plain

Targets

    • Target
      inst1.exe
    • Size 1.6MB
    • SHA256 35f2ec59313bbe5b78e4b043f06f8961f6f3e77b870544d15ee7cc1fca987d8c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • BumbleBee

      BumbleBee is a webshell malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks