General

  • Target

    9eacade8174f008c48ea57d43068dbce3d91093603db0511467c18252f60de32

  • Size

    2.3MB

  • MD5

    15f0cb9f3c41a2f79cd72dfa6ae50db8

  • SHA1

    b3a3a97dd7933343011faaae8462ccbe3b48cbe9

  • SHA256

    9eacade8174f008c48ea57d43068dbce3d91093603db0511467c18252f60de32

  • SHA512

    af1cc70af547d29c629143fe4b187f25a9c0b93c63d95a89bc3d47765ad2ad95e4edf9de328222482d1742e075352f0e82fe5b7542edf52e4f061130fd3cc06a

  • SSDEEP

    49152:2R7M9r/8AmAJXPasx29pSvKtxqJ7w+dIM9qPGrfepLX:RqSv/J7H+M91rmpz

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

VPS1GROUP

C2

23.82.19.208:443

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9eacade8174f008c48ea57d43068dbce3d91093603db0511467c18252f60de32
    .iso
  • out.iso
    .iso
  • Attachments.dat
    .dll windows:6 windows x64 arch:x64

    bc1fc12dfcfbfb96d61fc1ad211049f7


    Headers

    Imports

    Exports

    Sections

  • Attachments.lnk
    .lnk