General

  • Target

    1796-133-0x00000223F5A30000-0x00000223F5B91000-memory.dmp

  • Size

    1.4MB

  • MD5

    983b5abad75cbec8b3472f3dbb906b88

  • SHA1

    6ba63507ca2785406f436f2bbbacf7a462a376da

  • SHA256

    47d60d6fb14affc8cdfea12643e7483aef95e1ff5cbb3e34732c1aee125755ea

  • SHA512

    9f7a84df691bfbb448e5970aa141e5db87b233748cc27ad788f5b05bd90d274e5b09ffa934631b8afe281bff8c5c633475af97887797487a444938cedaf13711

  • SSDEEP

    24576:LO2dVaRrhSk8Bhwm2z8f6ZzoIo9Zx/f9FwwxlXw7rgsY6bi:wrEk8wm2Yf6Zdo9Zx/nrxRbsb+

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

inst

C2

37.79.205.12:443

51.83.255.85:443

192.119.81.86:443

23.106.215.141:443

194.15.216.247:443

104.168.244.96:443

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1796-133-0x00000223F5A30000-0x00000223F5B91000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections