General
- Target hk1c9y18em.dll
- Size 1.1MB
- Sample231014-b93xbacd97
- SHA256 8e04a2048e545d0faaf5d1e1c995c7b9529751e378b75c41f80c6682bd84e5aa
- MD5 b7c42a2f6443f7efb2f005b05040a40a
- SHA1 66e3ecc673fbb77c697a3b178a7458617de3d227
- SHA512 fb802bb1fbffdadc38d0bf373a868deaa03a701d079715f3261f68e7c8f77881134f4bc8154bc68b8688d2f3711e6a6c382f0e64929c9bd1715ff2aee2b49aef
- SSDEEP 24576:E40kaG+iDe5cMQW7v7+KIUC/ofj1fpLgN:E40kd+35cMv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hk1c9y18em.dll
Resource
win7-20230831-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
bumblebee
Botnet
-
js1
rc4.plain
Targets
-
- Target hk1c9y18em.dll
- Size 1.1MB
- SHA256 8e04a2048e545d0faaf5d1e1c995c7b9529751e378b75c41f80c6682bd84e5aa
- MD5 b7c42a2f6443f7efb2f005b05040a40a
- SHA1 66e3ecc673fbb77c697a3b178a7458617de3d227
- SHA512 fb802bb1fbffdadc38d0bf373a868deaa03a701d079715f3261f68e7c8f77881134f4bc8154bc68b8688d2f3711e6a6c382f0e64929c9bd1715ff2aee2b49aef
- SSDEEP 24576:E40kaG+iDe5cMQW7v7+KIUC/ofj1fpLgN:E40kd+35cMv
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of NtCreateThreadExHideFromDebugger