General

  • Target

    2024-05-04_010d567d0d1d868448b16dfc46c59a43_ryuk

  • Size

    1.4MB

  • Sample

    240504-t9cz1aee53

  • MD5

    010d567d0d1d868448b16dfc46c59a43

  • SHA1

    d6a4c3402298582a5ac1dedf4c2e14a0035730f3

  • SHA256

    318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e

  • SHA512

    2df55aaaae8ea60c2164993c1e5e48635f3ee8a6a129e2151bc594ff14b0cd5ff9778cc240438902a0055855007efe6458d9617d34a22389a406d41ef1b6a8e8

  • SSDEEP

    24576:ruAojA8HR776sO8p0qonGox07Vv4AlTe+MOF8G4VZ:ruBdHRH6kp0qgIx7RklN

Malware Config

Extracted

Family

bumblebee

Botnet

asd1234

rc4.plain

Targets

    • Target

      2024-05-04_010d567d0d1d868448b16dfc46c59a43_ryuk

    • Size

      1.4MB

    • MD5

      010d567d0d1d868448b16dfc46c59a43

    • SHA1

      d6a4c3402298582a5ac1dedf4c2e14a0035730f3

    • SHA256

      318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e

    • SHA512

      2df55aaaae8ea60c2164993c1e5e48635f3ee8a6a129e2151bc594ff14b0cd5ff9778cc240438902a0055855007efe6458d9617d34a22389a406d41ef1b6a8e8

    • SSDEEP

      24576:ruAojA8HR776sO8p0qonGox07Vv4AlTe+MOF8G4VZ:ruBdHRH6kp0qgIx7RklN

    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Detects executables referencing combination of virtualization drivers

    • Detects executables referencing virtualization MAC addresses

MITRE ATT&CK Matrix

Tasks