General

  • Target

    6214e19836c0c3c4bc94e23d6391c45ad87fdd890f6cbd3ab078650455c31dc8

  • Size

    1.0MB

  • MD5

    f411c1a716639d477d0838bba30a8fbb

  • SHA1

    8100df98a73a8a037b4085b86ff42af9c438f382

  • SHA256

    6214e19836c0c3c4bc94e23d6391c45ad87fdd890f6cbd3ab078650455c31dc8

  • SHA512

    fbda76832d983221ae32ac4ff8a129efbad205f2f16d370e98d7329451da1e3941c25ea9c5629d79d4bbe6f46b853bcea6e2432a2a31221bcaaac7a02d445042

  • SSDEEP

    24576:v78He7Xb4ZMhMdNI5BhlQmNeDiMkhSripiP4Ln2zt8GtHf4:vYHe7L4WhMQqiMksriN2zKCg

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

VPS1GROUP

C2

23.82.19.208:443

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6214e19836c0c3c4bc94e23d6391c45ad87fdd890f6cbd3ab078650455c31dc8
    .zip
  • Attachments-2206.iso
    .iso
  • Attachments.dat
    .dll windows:6 windows x64 arch:x64

    bc1fc12dfcfbfb96d61fc1ad211049f7


    Headers

    Imports

    Exports

    Sections

  • Attachments.lnk
    .lnk