General

  • Target

    452bb497728f1eb2ccd56b83f7a13e51447bd79852085e68908cb6c47625060b

  • Size

    1.1MB

  • Sample

    231014-b3lz8acb64

  • MD5

    7d2156efddf126dfb4c466da06f15e11

  • SHA1

    cf90131f73f72b7f32bccca438283a04a1001dbe

  • SHA256

    452bb497728f1eb2ccd56b83f7a13e51447bd79852085e68908cb6c47625060b

  • SHA512

    83496c49175e85e627ff320ec954f1e393d1473e17bf098f3dfbb98c09b18da6c1d4258bdcfcecc382a8da91424ff63ad882deb8a9572fecb6c667b131d74fe4

  • SSDEEP

    24576:drD2uxNbJd3BU7XFLH9io8hAGOAHxLrQ+P3U:ZDBxNvR

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

js1

rc4.plain

Targets

    • Target

      452bb497728f1eb2ccd56b83f7a13e51447bd79852085e68908cb6c47625060b

    • Size

      1.1MB

    • MD5

      7d2156efddf126dfb4c466da06f15e11

    • SHA1

      cf90131f73f72b7f32bccca438283a04a1001dbe

    • SHA256

      452bb497728f1eb2ccd56b83f7a13e51447bd79852085e68908cb6c47625060b

    • SHA512

      83496c49175e85e627ff320ec954f1e393d1473e17bf098f3dfbb98c09b18da6c1d4258bdcfcecc382a8da91424ff63ad882deb8a9572fecb6c667b131d74fe4

    • SSDEEP

      24576:drD2uxNbJd3BU7XFLH9io8hAGOAHxLrQ+P3U:ZDBxNvR

    Score
    10/10
    • BumbleBee

      BumbleBee is a webshell malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks