Extracted

Extracted

• • Target

    23102024_0226_Report_1eed5c99-5474-4156-a3c8-a5537ffea449.js

  • Size

    42KB

  • MD5

    c77a5b4849df9ec7bdcdf970504c6bf5

  • SHA1

    cea1a6eff08bf3c54eb889af265b0f62f6897cf9

  • SHA256

    3df813c5990e6bf7a841b1ecac9e224903e37a3f8e32d63b9816c3507aab5637

  • SHA512

    a24a3ca285cd942f1170f75ceb23a97c441cf7694b53af8e5c1c880e5ff6bbddde50f78e28a97785276998b5c7646ffccb34d5e2d0f13fe8a85acaa80f8bf98e

  • SSDEEP

    768:2/OWgWxiLG0nMLTYFFd4SCEA4iuxbSHsH0G4SCS64TN+n6AmiY7BTER/Xzb1ql83:zBgR/Xzb1qblhoooLCk+TBUVDiwQ+pa2

  Score

  10^/10

  discoveryexecutionbumblebeelnk001loader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Bumblebee family

    bumblebee

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2