General

  • Target

    8640824dd436af0e73c51a89aa86987f22fb76f60be94f61f3ae3affe5f0927e

  • Size

    804KB

  • MD5

    84cfa5bac0faa823d116644de18a20e3

  • SHA1

    80dae96c422ebad401d870ea1720b4a4622bf7cc

  • SHA256

    8640824dd436af0e73c51a89aa86987f22fb76f60be94f61f3ae3affe5f0927e

  • SHA512

    427b83f923a3d0349714de8de70c468cc96d510d83459885a43be0eb78859d50b572d508ef9351a8ed3194bb197643c08a8c0286ed649edfcd7f4fd4b86765b0

  • SSDEEP

    12288:cipvTLaZ+ZyRY2POCN2zPj77ejZYEc6QfBoHmuv+kfkQQkh:cipvTOZ+uPOC8H7KYEc6QfBud+ksQQ

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

1105a

C2

142.11.222.79:443

23.254.224.200:443

103.175.16.52:443

199.195.252.30:443

rc4.plain

Signatures

  • Bumblebee family
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8640824dd436af0e73c51a89aa86987f22fb76f60be94f61f3ae3affe5f0927e
    .dll windows:6 windows x64 arch:x64

    23ef69b19204b704365863cbed9a810e


    Headers

    Imports

    Exports

    Sections