General

  • Target

    33e80e854c0959e28b1f94cdcd67e28298dcfa3d80d160bc2042f00047a81922

  • Size

    1.1MB

  • Sample

    231014-b3mlracb66

  • MD5

    fcbb53724b1df93a5d1fc45bb55b9069

  • SHA1

    890b9b2dfda3203dc1a65c926d45b4e55db7c01a

  • SHA256

    33e80e854c0959e28b1f94cdcd67e28298dcfa3d80d160bc2042f00047a81922

  • SHA512

    64ea2135efb1af48da4675ff8754a776c0681165cb4e3824143404f96bebb417cfff9e3243f49b3720df16bdc5ab8f72ae063b38ce133ad58f0dfedbce3bef9d

  • SSDEEP

    24576:IzGpwBNRQH5EcGOgDhb0fHgrak/05JROMdw8+:gGSBis4

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

js1

rc4.plain

Targets

    • Target

      33e80e854c0959e28b1f94cdcd67e28298dcfa3d80d160bc2042f00047a81922

    • Size

      1.1MB

    • MD5

      fcbb53724b1df93a5d1fc45bb55b9069

    • SHA1

      890b9b2dfda3203dc1a65c926d45b4e55db7c01a

    • SHA256

      33e80e854c0959e28b1f94cdcd67e28298dcfa3d80d160bc2042f00047a81922

    • SHA512

      64ea2135efb1af48da4675ff8754a776c0681165cb4e3824143404f96bebb417cfff9e3243f49b3720df16bdc5ab8f72ae063b38ce133ad58f0dfedbce3bef9d

    • SSDEEP

      24576:IzGpwBNRQH5EcGOgDhb0fHgrak/05JROMdw8+:gGSBis4

    Score
    10/10
    • BumbleBee

      BumbleBee is a webshell malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks