Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-10-2024 12:07

General

  • Target

    318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e.exe

  • Size

    1.4MB

  • MD5

    010d567d0d1d868448b16dfc46c59a43

  • SHA1

    d6a4c3402298582a5ac1dedf4c2e14a0035730f3

  • SHA256

    318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e

  • SHA512

    2df55aaaae8ea60c2164993c1e5e48635f3ee8a6a129e2151bc594ff14b0cd5ff9778cc240438902a0055855007efe6458d9617d34a22389a406d41ef1b6a8e8

  • SSDEEP

    24576:ruAojA8HR776sO8p0qonGox07Vv4AlTe+MOF8G4VZ:ruBdHRH6kp0qgIx7RklN

Malware Config

Extracted

Family

bumblebee

Botnet

asd1234

Attributes
  • dga

    d00d7ks32.life

    11qet4bgg.life

    2a6m2wkiq.life

    xky2lv24m.life

    cmau5xobd.life

    upxamcuma.life

    z1hf83vee.life

    yk37wagdg.life

    ajl0toabj.life

    qqpjqdylr.life

    1wrap3lnr.life

    z8g4klplp.life

    7clm8w86o.life

    nii34kqrw.life

    dl23dcg0p.life

    pwfkwiup6.life

    pltfrvss1.life

    z4aarde49.life

    4hdkyh1ns.life

    crbk7hduu.life

    p5zhkxu7x.life

    v4wlbpzf0.life

    qm4hupdsq.life

    go6nu8hgl.life

    gaamc74sm.life

    23b3imkqh.life

    9qf9v3tgq.life

    yg7kcxnie.life

    gebj02y46.life

    f0a3myb17.life

  • dga_seed

    -6.773930237931558e+18

  • domain_length

    9

  • num_dga_domains

    100

  • port

    443

rc4.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e.exe
    "C:\Users\Admin\AppData\Local\Temp\318822896d2f9f7c54e230ab1fbd77e4225bd5d1edc002c56316a0106eca652e.exe"
    1⤵
      PID:4280

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4280-0-0x0000016C34A00000-0x0000016C34B02000-memory.dmp

      Filesize

      1.0MB

    • memory/4280-1-0x0000016C34D20000-0x0000016C34F34000-memory.dmp

      Filesize

      2.1MB

    • memory/4280-2-0x0000016C34D20000-0x0000016C34F34000-memory.dmp

      Filesize

      2.1MB

    • memory/4280-3-0x0000016C34D20000-0x0000016C34F34000-memory.dmp

      Filesize

      2.1MB