Overview

overview

10

Static

static

3

9e07d09f14...31.dll

windows7-x64

10

9e07d09f14...31.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • submitted
    16-10-2024 11:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831.dll

  • Size

    4.1MB

  • MD5

    22cc610a0dc995b24733ab10a0de155b

  • SHA1

    5fdf0793cc0a81462b1cf0370fa1912900a54a6e

  • SHA256

    9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831

  • SHA512

    c2fe130e9db35f71c45e1a0b8a2d1016875f36655223b4a8f742bce812e28e1f14dec99331a7fb0603888a18cc9ee87c33450e79eb845523e0bd182870c4b363

  • SSDEEP

    49152:D4XNMMWqBJ0xqoyHe53etjsamXSaurtbobdKlpPzq75jApOVv5p5GAoIW0O7GICE:D49FWqopKsaEbH+pe5jCOV5Gf3GJ9o

Score
10/10
bumblebeemsiloader

Malware Config

Extracted

Family

bumblebee

Botnet

msi

Attributes
  • dga

    tvx1ovdepj8.life

    acgr6r8zdot.life

    ilofx941igp.life

    8x2apo5m7ri.life

    x9yrzer0ndt.life

    93j4v4jopzd.life

    ameagxzo2f7.life

    nyy41uibsv5.life

    ru4jvijdytq.life

    l9t6r0y6cvi.life

    f4vb9n3tdvh.life

    9do3mcejztt.life

    pxu1ajsdhqr.life

    7exy2b231n2.life

    vu5b47m18jn.life

    6mnudp7zj73.life

    p5047yjrb8q.life

    d0xtxp89bb9.life

    ygo9u1fkwux.life

    fig3gj0v6qe.life

    38f5wvwwn7o.life

    txgogs9p8a1.life

    uyn0icgx1kv.life

    2z1ls31az7s.life

    0cc2z8zrnhf.life

    fsr2hskx44p.life

    du19ek78tjw.life

    234ct3lkozp.life

    he8fq4k8d3w.life

    7ewh8ltr7il.life

  • dga_seed

    1016365528594956469

  • domain_length

    11

  • num_dga_domains

    100

  • port

    443

rc4.plain

Signatures

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831.dll
    1⤵
      PID:1892

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1892-6-0x0000000076FC0000-0x0000000077169000-memory.dmp

      Filesize

      1.7MB

      Download

    • memory/1892-5-0x0000000077011000-0x0000000077012000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1892-3-0x0000000002100000-0x0000000002319000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/1892-4-0x0000000001EC0000-0x0000000002100000-memory.dmp

      Filesize

      2.2MB

      Download

    • memory/1892-2-0x0000000002100000-0x0000000002319000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/1892-0-0x0000000002100000-0x0000000002319000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/1892-8-0x0000000076FC0000-0x0000000077169000-memory.dmp

      Filesize

      1.7MB

      Download

    • memory/1892-7-0x0000000076FC0000-0x0000000077169000-memory.dmp

      Filesize

      1.7MB

      Download

    • memory/1892-9-0x0000000002100000-0x0000000002319000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/1892-10-0x0000000001EC0000-0x0000000002100000-memory.dmp

      Filesize

      2.2MB

      Download

    • memory/1892-11-0x0000000076FC0000-0x0000000077169000-memory.dmp

      Filesize

      1.7MB

      Download