General

  • Target

    ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f.exe

  • Size

    1.4MB

  • Sample

    240507-b5k6psfg59

  • MD5

    f4cac7f530910389ded9c795cc13e299

  • SHA1

    510a4a76856858213bf526d8d435c06bca4d6405

  • SHA256

    ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f

  • SHA512

    f4315285a6c2e0f53312753d9ec6583c56a300871bee063cb2afe6c9109e0428b82eab5c548bcadb95421a79f4145fdd404c9782e40fbf00defeef3a0bd2f3ab

  • SSDEEP

    24576:TBjUP0akCHU0AE97scZI8c+zGXUUT8GDl4ZslSJkUrTgUWnIm50u2Jjr14:TVY0SHUz8bzjpGDSOldU1k12Rr

Malware Config

Extracted

Family

bumblebee

Botnet

asd1234

Attributes
  • dga

    d00d7ks32.life

    11qet4bgg.life

    2a6m2wkiq.life

    xky2lv24m.life

    cmau5xobd.life

    upxamcuma.life

    z1hf83vee.life

    yk37wagdg.life

    ajl0toabj.life

    qqpjqdylr.life

    1wrap3lnr.life

    z8g4klplp.life

    7clm8w86o.life

    nii34kqrw.life

    dl23dcg0p.life

    pwfkwiup6.life

    pltfrvss1.life

    z4aarde49.life

    4hdkyh1ns.life

    crbk7hduu.life

    p5zhkxu7x.life

    v4wlbpzf0.life

    qm4hupdsq.life

    go6nu8hgl.life

    gaamc74sm.life

    23b3imkqh.life

    9qf9v3tgq.life

    yg7kcxnie.life

    gebj02y46.life

    f0a3myb17.life

  • dga_seed

    -6773930237931557767

  • domain_length

    9

  • num_dga_domains

    100

  • port

    443

rc4.plain

Targets

    • Target

      ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f.exe

    • Size

      1.4MB

    • MD5

      f4cac7f530910389ded9c795cc13e299

    • SHA1

      510a4a76856858213bf526d8d435c06bca4d6405

    • SHA256

      ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f

    • SHA512

      f4315285a6c2e0f53312753d9ec6583c56a300871bee063cb2afe6c9109e0428b82eab5c548bcadb95421a79f4145fdd404c9782e40fbf00defeef3a0bd2f3ab

    • SSDEEP

      24576:TBjUP0akCHU0AE97scZI8c+zGXUUT8GDl4ZslSJkUrTgUWnIm50u2Jjr14:TVY0SHUz8bzjpGDSOldU1k12Rr

    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Bumblebee family

    • Detects executables referencing combination of virtualization drivers

    • Detects executables referencing virtualization MAC addresses

MITRE ATT&CK Matrix

Tasks