Analysis
-
max time kernel
59s -
max time network
63s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-02-2024 10:07
General
-
Target
c34e5d36bd3a9a6fca92e900ab015aa50bb20d2cd6c0b6e03d070efe09ee689a.dll
-
Size
2.3MB
-
MD5
e815078b81bda42fd1d8029f82f63f8c
-
SHA1
6ddae41b0861ff953d261dabd7d63b7ff1dce7e8
-
SHA256
c34e5d36bd3a9a6fca92e900ab015aa50bb20d2cd6c0b6e03d070efe09ee689a
-
SHA512
7330be3ff019303b49afb753b45fedf9b6794a4ea670faa2eeb477dc7168aeadad52e5499bca52eb2c23f8e9a5c021d7c2ddb1c44ce82fcd357cdd257b31f0fb
-
SSDEEP
24576:+7GSow1W1xmEJj65Ar478M30eNxFrSZJi8nDjXEHAzeozxlXZWXrXExoXOG8UdDP:+PKG7783j/2buc4
Score
10/10
Malware Config
Extracted
Family
bumblebee
Botnet
dcc3
rc4.plain
Signatures
-
BumbleBee
BumbleBee is a loader malware written in C++.
-
Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\c34e5d36bd3a9a6fca92e900ab015aa50bb20d2cd6c0b6e03d070efe09ee689a.dll1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
924KB
-
Filesize
2.1MB
-
Filesize
1.7MB
-
Filesize
2.1MB
-
Filesize
1.7MB
-
Filesize
2.1MB
-
Filesize
924KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB