Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
10-11-2023 09:36
General
-
Target
Requested_Documents_SEPTEMBER2023.pdf .exe
-
Size
795KB
-
MD5
5ed850cfe3074a397566cf6d2191f5b1
-
SHA1
30f902bcc7f367da34cc976d92ebc942532f0686
-
SHA256
3da6854b3feb71c69d667b654622b1760fcb7fef519fdb78fbcbeb4b1c094e76
-
SHA512
58c7a3073b808587e3e0664ac8075535642f5bae726f96406f8b3ed053b928c018dd96dffc4e385088ba90a22923a37bbda3955f1f8f14ac4e0017158d77546e
-
SSDEEP
24576:KRYVIX91rfc2BGkuDIJlg4SQABWPeEzTX:+Skng4S05H
Malware Config
Extracted
bumblebee
rar0409
-
dga
cmid1s1zeiu.life
itszko2ot5u.life
3v1n35i5kwx.life
newdnq1xnl9.life
jkyj6awt1ao.life
ddrjv6y42b8.life
1pnhp5o5za1.life
y13iqvlfjl5.life
xp0btfgegbo.life
gpv3uw5tmy4.life
5d7rdf3layn.life
2aed6bvquxs.life
5t9oknzu433.life
sy53gmpuq1i.life
09cwff8wgdh.life
4elhq2521mw.life
b4arp834sch.life
s3iug4uiy7t.life
q1cvhi9onpu.life
m3j4htyodnu.life
dzzrhn9rvqa.life
uriqas6zede.life
tv45x1ukt9w.life
9dnuk0xl7yc.life
zro95b8zb3r.life
9da1kshoyuq.life
zph13yx1leo.life
0q6mvuo4wl6.life
nyoqtkpub9x.life
l1bnym8lg65.life
-
dga_seed
TEST_SEE
-
domain_length
11
-
num_dga_domains
100
-
port
443
Signatures
-
BumbleBee
BumbleBee is a loader malware written in C++.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Requested_Documents_SEPTEMBER2023.pdf .exe"C:\Users\Admin\AppData\Local\Temp\Requested_Documents_SEPTEMBER2023.pdf .exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5e5dc7b47dbae0cc7f83c10bff06f1a8b
SHA1c1707b0d087df8197d050a7963d46b3d05366dc5
SHA25609f522411b7624595c91649de828908fdde4990e04306fb1cf574f6755da1a4b
SHA512e4ac1100f937c650c50ce2325fde31d7de9d0360fae2003bd147e2fdea8f63daefed0c3456acfa4598b299293a58e159a055c617b8fc4887fcc91173ebeab0b9
-
Filesize
488KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB