Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • submitted
    07-05-2024 17:43

General

  • Target

    ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f.exe

  • Size

    1.4MB

  • MD5

    f4cac7f530910389ded9c795cc13e299

  • SHA1

    510a4a76856858213bf526d8d435c06bca4d6405

  • SHA256

    ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f

  • SHA512

    f4315285a6c2e0f53312753d9ec6583c56a300871bee063cb2afe6c9109e0428b82eab5c548bcadb95421a79f4145fdd404c9782e40fbf00defeef3a0bd2f3ab

  • SSDEEP

    24576:TBjUP0akCHU0AE97scZI8c+zGXUUT8GDl4ZslSJkUrTgUWnIm50u2Jjr14:TVY0SHUz8bzjpGDSOldU1k12Rr

Malware Config

Extracted

Family

bumblebee

Botnet

asd1234

Attributes
  • dga

    d00d7ks32.life

    11qet4bgg.life

    2a6m2wkiq.life

    xky2lv24m.life

    cmau5xobd.life

    upxamcuma.life

    z1hf83vee.life

    yk37wagdg.life

    ajl0toabj.life

    qqpjqdylr.life

    1wrap3lnr.life

    z8g4klplp.life

    7clm8w86o.life

    nii34kqrw.life

    dl23dcg0p.life

    pwfkwiup6.life

    pltfrvss1.life

    z4aarde49.life

    4hdkyh1ns.life

    crbk7hduu.life

    p5zhkxu7x.life

    v4wlbpzf0.life

    qm4hupdsq.life

    go6nu8hgl.life

    gaamc74sm.life

    23b3imkqh.life

    9qf9v3tgq.life

    yg7kcxnie.life

    gebj02y46.life

    f0a3myb17.life

  • dga_seed

    -6773930237931557767

  • domain_length

    9

  • num_dga_domains

    100

  • port

    443

rc4.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f.exe
    "C:\Users\Admin\AppData\Local\Temp\ccc029998b00cd29335e0729d852becea2ebe6a9ce2547f963f71da97d07439f.exe"
    1⤵
      PID:2328

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2328-0-0x000002A119510000-0x000002A11960F000-memory.dmp

      Filesize

      1020KB

    • memory/2328-1-0x000002A119820000-0x000002A119A34000-memory.dmp

      Filesize

      2.1MB

    • memory/2328-2-0x000002A119820000-0x000002A119A34000-memory.dmp

      Filesize

      2.1MB

    • memory/2328-3-0x000002A119820000-0x000002A119A34000-memory.dmp

      Filesize

      2.1MB