Resubmissions

23-02-2024 09:54

240223-lw8whsfa37 10

18-01-2024 17:02

240118-vj468sedd7 10

17-01-2024 08:56

240117-kv7fmacagr 10

13-09-2023 20:10

230913-yx26ksef8w 10

General

  • Target

    name.dll

  • Size

    1.1MB

  • Sample

    240118-vj468sedd7

  • MD5

    ff519023357a9cc5bb731d798de2f6b6

  • SHA1

    c14545a2d261647012a825e77af3a52fbc2cbc4d

  • SHA256

    e714557aa665651045795c747d9b0faec60863c27edd579c7d6ed75bb33b94f1

  • SHA512

    daddc936416b6ff42bdc47ea50b9b7e0acdaa202f46f75e8a14422c5254eb9a23918bd42ea6131503692045cbedf66373429c9c3cd07286c649f2a04801df1c0

  • SSDEEP

    24576:Zf4/h/FsE6r+XMKFo6hFWHWhw7a9LfMtJ3JCI:J4/hNsEiKK

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

js1

Attributes
  • dga

    bslv15nrnyg.life

    bnkmm2z9l91.life

    zz8ahwmsibn.life

    amz1i2a9h5o.life

    ixxgx7hdw8x.life

    zeyy3v840wv.life

    ojdmlrndu1e.life

    t9ew3t1yyir.life

    4pm7athfzuw.life

    gs4qqq5x2js.life

    n1q2knstzz7.life

    x5puf10ekvs.life

    sx9bcrv4w3c.life

    1ildkezkqwu.life

    ctfblrcygc1.life

    5bj7l6w1nwa.life

    vwtmveo5l3i.life

    isletmctok6.life

    t4cb5gz5kob.life

    acnzqlmqtcx.life

    ioxx4ypvzqe.life

    j99zl8nes4g.life

    c4yz6e2giei.life

    tt7n14xjxav.life

    cvwu39g0c5v.life

    4035cmp6zch.life

    y3gvymljj6l.life

    5qe3tr94m43.life

    3d0jvphjl90.life

    c24tjr7spl6.life

  • dga_seed

    OKFsgukk

  • domain_length

    11

  • num_dga_domains

    100

  • port

    443

rc4.plain

Targets

    • Target

      name.dll

    • Size

      1.1MB

    • MD5

      ff519023357a9cc5bb731d798de2f6b6

    • SHA1

      c14545a2d261647012a825e77af3a52fbc2cbc4d

    • SHA256

      e714557aa665651045795c747d9b0faec60863c27edd579c7d6ed75bb33b94f1

    • SHA512

      daddc936416b6ff42bdc47ea50b9b7e0acdaa202f46f75e8a14422c5254eb9a23918bd42ea6131503692045cbedf66373429c9c3cd07286c649f2a04801df1c0

    • SSDEEP

      24576:Zf4/h/FsE6r+XMKFo6hFWHWhw7a9LfMtJ3JCI:J4/hNsEiKK

    Score
    10/10
    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Matrix

Tasks