Analysis Overview
SHA256
9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831
Threat Level: Known bad
The file 9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831.exe was found to be: Known bad.
Malicious Activity Summary
BumbleBee
Unsigned PE
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-10-17 02:03
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-10-17 02:03
Reported
2024-10-17 02:06
Platform
win7-20240903-en
Max time kernel
149s
Max time network
150s
Command Line
Signatures
BumbleBee
Processes
C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831.dll
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | tvx1ovdepj8.life | udp |
| US | 8.8.8.8:53 | acgr6r8zdot.life | udp |
| US | 8.8.8.8:53 | ilofx941igp.life | udp |
| US | 8.8.8.8:53 | 8x2apo5m7ri.life | udp |
| US | 8.8.8.8:53 | x9yrzer0ndt.life | udp |
| DE | 188.40.187.138:443 | x9yrzer0ndt.life | tcp |
| US | 8.8.8.8:53 | 93j4v4jopzd.life | udp |
| DE | 188.40.187.138:443 | 93j4v4jopzd.life | tcp |
| US | 8.8.8.8:53 | ameagxzo2f7.life | udp |
| DE | 185.26.238.223:443 | ameagxzo2f7.life | tcp |
| US | 8.8.8.8:53 | nyy41uibsv5.life | udp |
| DE | 188.40.187.138:443 | nyy41uibsv5.life | tcp |
| US | 8.8.8.8:53 | ru4jvijdytq.life | udp |
| DE | 188.40.187.138:443 | ru4jvijdytq.life | tcp |
| US | 8.8.8.8:53 | l9t6r0y6cvi.life | udp |
| US | 8.8.8.8:53 | f4vb9n3tdvh.life | udp |
| DE | 188.40.187.138:443 | f4vb9n3tdvh.life | tcp |
| US | 8.8.8.8:53 | 9do3mcejztt.life | udp |
| US | 8.8.8.8:53 | pxu1ajsdhqr.life | udp |
| US | 8.8.8.8:53 | 7exy2b231n2.life | udp |
| DE | 188.40.187.138:443 | 7exy2b231n2.life | tcp |
| US | 8.8.8.8:53 | vu5b47m18jn.life | udp |
| US | 8.8.8.8:53 | 6mnudp7zj73.life | udp |
| US | 8.8.8.8:53 | p5047yjrb8q.life | udp |
| DE | 188.40.187.138:443 | p5047yjrb8q.life | tcp |
| US | 8.8.8.8:53 | d0xtxp89bb9.life | udp |
| US | 8.8.8.8:53 | ygo9u1fkwux.life | udp |
| US | 8.8.8.8:53 | fig3gj0v6qe.life | udp |
| DE | 188.40.187.138:443 | fig3gj0v6qe.life | tcp |
| US | 8.8.8.8:53 | 38f5wvwwn7o.life | udp |
| US | 8.8.8.8:53 | txgogs9p8a1.life | udp |
| US | 8.8.8.8:53 | uyn0icgx1kv.life | udp |
| AT | 38.180.144.181:443 | uyn0icgx1kv.life | tcp |
| US | 8.8.8.8:53 | 2z1ls31az7s.life | udp |
| US | 8.8.8.8:53 | 0cc2z8zrnhf.life | udp |
| US | 8.8.8.8:53 | fsr2hskx44p.life | udp |
| NL | 185.81.114.195:443 | fsr2hskx44p.life | tcp |
| US | 8.8.8.8:53 | du19ek78tjw.life | udp |
| US | 8.8.8.8:53 | 234ct3lkozp.life | udp |
| US | 8.8.8.8:53 | he8fq4k8d3w.life | udp |
| US | 8.8.8.8:53 | 7ewh8ltr7il.life | udp |
| DE | 188.40.187.138:443 | 7ewh8ltr7il.life | tcp |
| US | 8.8.8.8:53 | dw34kmgfl7t.life | udp |
| US | 8.8.8.8:53 | f2j20ayqh8y.life | udp |
| US | 8.8.8.8:53 | 331k2rdkmmb.life | udp |
| DE | 188.40.187.138:443 | 331k2rdkmmb.life | tcp |
| US | 8.8.8.8:53 | 37z6li6l9y2.life | udp |
Files
memory/1524-6-0x00000000775E0000-0x0000000077789000-memory.dmp
memory/1524-4-0x00000000021D0000-0x00000000023E9000-memory.dmp
memory/1524-5-0x0000000077631000-0x0000000077632000-memory.dmp
memory/1524-2-0x00000000021D0000-0x00000000023E9000-memory.dmp
memory/1524-3-0x0000000001F90000-0x00000000021D0000-memory.dmp
memory/1524-0-0x00000000021D0000-0x00000000023E9000-memory.dmp
memory/1524-8-0x00000000775E0000-0x0000000077789000-memory.dmp
memory/1524-7-0x00000000775E0000-0x0000000077789000-memory.dmp
memory/1524-9-0x00000000021D0000-0x00000000023E9000-memory.dmp
memory/1524-10-0x0000000001F90000-0x00000000021D0000-memory.dmp
memory/1524-11-0x00000000775E0000-0x0000000077789000-memory.dmp
memory/1524-12-0x00000000775E0000-0x0000000077789000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2024-10-17 02:03
Reported
2024-10-17 02:06
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
150s
Command Line
Signatures
BumbleBee
Processes
C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\9e07d09f1457297a9a229def9771f6badaa8798751b22611dd915327069fa831.dll
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tvx1ovdepj8.life | udp |
| DE | 188.40.187.138:443 | tvx1ovdepj8.life | tcp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 138.187.40.188.in-addr.arpa | udp |
| US | 8.8.8.8:53 | acgr6r8zdot.life | udp |
| DE | 188.40.187.138:443 | acgr6r8zdot.life | tcp |
| US | 8.8.8.8:53 | ilofx941igp.life | udp |
| DE | 188.40.187.138:443 | ilofx941igp.life | tcp |
| US | 8.8.8.8:53 | 8x2apo5m7ri.life | udp |
| DE | 188.40.187.138:443 | 8x2apo5m7ri.life | tcp |
| US | 8.8.8.8:53 | x9yrzer0ndt.life | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| DE | 188.40.187.138:443 | x9yrzer0ndt.life | tcp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 93j4v4jopzd.life | udp |
| DE | 188.40.187.138:443 | 93j4v4jopzd.life | tcp |
| US | 8.8.8.8:53 | ameagxzo2f7.life | udp |
| DE | 185.26.238.223:443 | ameagxzo2f7.life | tcp |
| US | 8.8.8.8:53 | nyy41uibsv5.life | udp |
| DE | 188.40.187.138:443 | nyy41uibsv5.life | tcp |
| US | 8.8.8.8:53 | ru4jvijdytq.life | udp |
| DE | 188.40.187.138:443 | ru4jvijdytq.life | tcp |
| US | 8.8.8.8:53 | 105.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | l9t6r0y6cvi.life | udp |
| DE | 188.40.187.138:443 | l9t6r0y6cvi.life | tcp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | f4vb9n3tdvh.life | udp |
| DE | 188.40.187.138:443 | f4vb9n3tdvh.life | tcp |
| US | 8.8.8.8:53 | 9do3mcejztt.life | udp |
| DE | 188.40.187.138:443 | 9do3mcejztt.life | tcp |
| US | 8.8.8.8:53 | pxu1ajsdhqr.life | udp |
| DE | 188.40.187.138:443 | pxu1ajsdhqr.life | tcp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 48.229.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 7exy2b231n2.life | udp |
| DE | 188.40.187.138:443 | 7exy2b231n2.life | tcp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 43.58.199.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | vu5b47m18jn.life | udp |
| DE | 188.40.187.138:443 | vu5b47m18jn.life | tcp |
| US | 8.8.8.8:53 | 6mnudp7zj73.life | udp |
| DE | 188.40.187.138:443 | 6mnudp7zj73.life | tcp |
| US | 8.8.8.8:53 | p5047yjrb8q.life | udp |
| DE | 188.40.187.138:443 | p5047yjrb8q.life | tcp |
| US | 8.8.8.8:53 | d0xtxp89bb9.life | udp |
| DE | 188.40.187.138:443 | d0xtxp89bb9.life | tcp |
| US | 8.8.8.8:53 | ygo9u1fkwux.life | udp |
| FI | 37.27.203.12:443 | ygo9u1fkwux.life | tcp |
| US | 8.8.8.8:53 | 12.203.27.37.in-addr.arpa | udp |
| US | 8.8.8.8:53 | fig3gj0v6qe.life | udp |
| DE | 188.40.187.138:443 | fig3gj0v6qe.life | tcp |
| US | 8.8.8.8:53 | 38f5wvwwn7o.life | udp |
| RO | 185.93.221.123:443 | 38f5wvwwn7o.life | tcp |
Files
memory/4784-1-0x0000000002FA0000-0x00000000031B9000-memory.dmp
memory/4784-4-0x0000000002FA0000-0x00000000031B9000-memory.dmp
memory/4784-6-0x00007FFF07F10000-0x00007FFF08105000-memory.dmp
memory/4784-5-0x00007FFF07FAD000-0x00007FFF07FAE000-memory.dmp
memory/4784-3-0x0000000002D60000-0x0000000002FA0000-memory.dmp
memory/4784-7-0x0000000002FA0000-0x00000000031B9000-memory.dmp
memory/4784-2-0x0000000002FA0000-0x00000000031B9000-memory.dmp
memory/4784-0-0x0000000002FA0000-0x00000000031B9000-memory.dmp
memory/4784-10-0x00007FFF07F10000-0x00007FFF08105000-memory.dmp
memory/4784-9-0x00007FFF07F10000-0x00007FFF08105000-memory.dmp
memory/4784-8-0x00007FFF07F10000-0x00007FFF08105000-memory.dmp
memory/4784-11-0x0000000002D60000-0x0000000002FA0000-memory.dmp
memory/4784-12-0x00007FFF07F10000-0x00007FFF08105000-memory.dmp