General

  • Target

    884-133-0x0000000002D00000-0x0000000002E61000-memory.dmp

  • Size

    1.4MB

  • MD5

    04f152b16f755f086d5a2b05e2de07f2

  • SHA1

    c49b18bad88c5bf93c60296defa1de74a3893df7

  • SHA256

    1d6b769d22ab75c4d54371f6556ba7d8b272cd8f514affea26e54316cbc5868a

  • SHA512

    570e50c01f3f9ccdb91c32a0412da11bbd59984f151ac60df66578989bc3200882dda902bb0df418ef679c594bf102eaff0f248cebea5ab9069aec8ac2fd257a

  • SSDEEP

    24576:LO2dVaRrhSk8Bhwm2z8f6ZzoIo9Zx/f9FwwxlXwxs7Yubi:wrEk8wm2Yf6Zdo9Zx/nrxRp7/+

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

msi11606

C2

176.111.174.67:443

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 884-133-0x0000000002D00000-0x0000000002E61000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections