Extracted

• • Target

    15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7_JC.exe

  • Size

    894KB

  • MD5

    a4e4f8966796845079ca6b853fd1899d

  • SHA1

    25906943d58610a2208c9312c555dee7eb16952e

  • SHA256

    15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

  • SHA512

    22df60f5d457cca829aa86f708d6df492aa8acf794dbaed5bfac06b3f6fcbd7a331139c92465a9e5ec57232b76102b26ba593e527266709fd225ca15a3c3045a

  • SSDEEP

    12288:1hPALJCb+JI7GB5ShQUO3wY6Wpg8qvtN2FCOWPZzMe0n28qX2Y5aIv/86PaeAkYT:1hum+JI/jO3z6WStlFq4Gd66PybS

  Score

  10^/10

  bumblebeelg1010trojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2