Resubmissions

27/10/2023, 12:27

231027-pmsdysfh6210

16/10/2023, 02:37

231016-c4mhtadd4510

General

  • Target
    15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
  • Size 894KB
  • Sample231027-pmsdysfh62
  • SHA256 15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • bumblebee

Botnet
  • lg1010

Attributes
  • dga

    g7qf7ew5c.life

    ibgrlnu1e.life

    x5fnzbct1.life

    1i2vp7bte.life

    dflucrsh8.life

    0f8ql4hr8.life

    f9ftn74zw.life

    nwm76e7b5.life

    3hjqyzaex.life

    v43qhl0mc.life

    6aepjxcgi.life

    4tbwu08rg.life

    nzz3urf67.life

    9xspr6w4a.life

    oikdiug9o.life

    vajo99879.life

    5v7x1sqr4.life

    57gqsekdz.life

    5v5gciivx.life

    33a1wkm3h.life

    vt6xqpldf.life

    t9lqm51rl.life

    p75sz88kk.life

    wz9ar8gpv.life

    fdx4ra84n.life

    nx37k4a6z.life

    m8mczdgxv.life

    wj7y0l4d9.life

    hit0fdgit.life

    82c6g5meu.life

  • dga_seed

    l0210lsk

  • domain_length

    9

  • num_dga_domains

    100

  • port

    443

rc4.plain

Targets

    • Target
      15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
    • Size 894KB
    • SHA256 15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks