General

  • Target

    2024-05-07_f4cac7f530910389ded9c795cc13e299_ryuk

  • Size

    1.4MB

  • Sample

    240507-nqplssgg85

  • MD5

    f4cac7f530910389ded9c795cc13e299

  • SHA1

    510a4a76856858213bf526d8d435c06bca4d6405

  • SHA256

    ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f

  • SHA512

    f4315285a6c2e0f53312753d9ec6583c56a300871bee063cb2afe6c9109e0428b82eab5c548bcadb95421a79f4145fdd404c9782e40fbf00defeef3a0bd2f3ab

  • SSDEEP

    24576:TBjUP0akCHU0AE97scZI8c+zGXUUT8GDl4ZslSJkUrTgUWnIm50u2Jjr14:TVY0SHUz8bzjpGDSOldU1k12Rr

Malware Config

Extracted

Family

bumblebee

Botnet

asd1234

rc4.plain

Targets

    • Target

      2024-05-07_f4cac7f530910389ded9c795cc13e299_ryuk

    • Size

      1.4MB

    • MD5

      f4cac7f530910389ded9c795cc13e299

    • SHA1

      510a4a76856858213bf526d8d435c06bca4d6405

    • SHA256

      ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f

    • SHA512

      f4315285a6c2e0f53312753d9ec6583c56a300871bee063cb2afe6c9109e0428b82eab5c548bcadb95421a79f4145fdd404c9782e40fbf00defeef3a0bd2f3ab

    • SSDEEP

      24576:TBjUP0akCHU0AE97scZI8c+zGXUUT8GDl4ZslSJkUrTgUWnIm50u2Jjr14:TVY0SHUz8bzjpGDSOldU1k12Rr

    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Detects executables referencing combination of virtualization drivers

    • Detects executables referencing virtualization MAC addresses

MITRE ATT&CK Matrix

Tasks