Extracted

• • Target

    ps1.ps1

  • Size

    71B

  • MD5

    e6fb5ed0cbd3e324d774c7c8ff2c6caa

  • SHA1

    fe7769b3632dec7700d4a81d44609095d0e56a98

  • SHA256

    1e65ebca25cee22de96f313bf810a7f3324f3e811bbc1f0636aa9fdbc3801138

  • SHA512

    f511c21615fd7ce18c5d1108d6c42f7e645ccb0db104721ec323a5e418eb8f7ef80c3a11c1d5e671269642f214daca6b720d64d54109d51549f7e0c42f2a827c

  Score

  10^/10

  bumblebeedcc3executionloader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Bumblebee family

    bumblebee

  • Blocklisted process makes network request

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2

• • Target

    w_ver.dll

  • Size

    2.3MB

  • MD5

    e815078b81bda42fd1d8029f82f63f8c

  • SHA1

    6ddae41b0861ff953d261dabd7d63b7ff1dce7e8

  • SHA256

    c34e5d36bd3a9a6fca92e900ab015aa50bb20d2cd6c0b6e03d070efe09ee689a

  • SHA512

    7330be3ff019303b49afb753b45fedf9b6794a4ea670faa2eeb477dc7168aeadad52e5499bca52eb2c23f8e9a5c021d7c2ddb1c44ce82fcd357cdd257b31f0fb

  • SSDEEP

    24576:+7GSow1W1xmEJj65Ar478M30eNxFrSZJi8nDjXEHAzeozxlXZWXrXExoXOG8UdDP:+PKG7783j/2buc4

  Score

  10^/10

  bumblebeedcc3loader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Bumblebee family

    bumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral3behavioral4