Extracted

• • Target

    8ae7694001a73e0eebf0ea394396cd1aacc3a817e1e321da288e445f4feb1465.msi.bin

  • Size

    7.8MB

  • MD5

    cbce77f88d5fd1df590d5172bbb83a2c

  • SHA1

    65bd87e1c512e9cd60a3952e0712d0f67aa952e1

  • SHA256

    8ae7694001a73e0eebf0ea394396cd1aacc3a817e1e321da288e445f4feb1465

  • SHA512

    4d579a70782b99c4fb19398f9d7b430cbe5f9ee5b67dbf360f543fecd010aba373a43266b63b5e7bbe00f8636cdd7d9346806cdaffbaa02608c08310cd752ded

  • SSDEEP

    196608:jxaEo5JeKKpyRqNJMWb75RGlzGban/ba:joEWJeKKpyRqNJMWb75RGlzGbCba

  Score

  10^/10

  bumblebeeonkomsi2loader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Blocklisted process makes network request

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2