Overview

overview

10

Static

static

10

1204-54-0x...ry.dll

windows7-x64

1

1204-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1204-54-0x0000000001AD0000-0x0000000001C44000-memory.dmp

  • Size

    1.5MB

  • MD5

    33270cacae86975a84f9b7cc1b3491a8

  • SHA1

    72cbbb0e2ef9213d0e209bc53d358c3e752aedeb

  • SHA256

    0600526ebdf34957743e5c47477542dce4b56a8f9dd2e520b47dc77b80a0e81c

  • SHA512

    761207edc653a544306f19d165b41d9e17192267f4a4517d91f4315b4f2260633886b3bbd02a9d8f17d67d49c3a431c93e261b9e44a4c5a65feeb439adfc36a2

  • SSDEEP

    24576:UJAx41SXU4LG5Vlcz8PBhNbJgwm9CEl9DAvOBddLfn0J2pk3:20bG5Vyz8B9gwm95AAdhfA2

Score
10/10
202lgbumblebee

Malware Config

Extracted

Family

bumblebee

Botnet

202lg

C2

104.168.157.253:443

209.141.40.19:443

107.189.5.17:443

23.254.167.63:443

91.206.178.234:443

146.19.173.86:443

103.175.16.104:443

194.135.33.85:443

173.234.155.246:443

51.68.144.43:443

172.86.120.111:443

160.20.147.242:443

51.75.62.204:443

205.185.113.34:443

194.135.33.184:443

23.82.140.155:443

185.173.34.35:443
rc4.plain

Signatures

  • Bumblebee family
    bumblebee
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1204-54-0x0000000001AD0000-0x0000000001C44000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections