Extracted

• • Target

    2024-11-20_680a9c63e6d459a8c7c75360122f98d4_hijackloader_ryuk

  • Size

    1.4MB

  • MD5

    680a9c63e6d459a8c7c75360122f98d4

  • SHA1

    b8db117430c39820303e27d40883ab3c8508cf05

  • SHA256

    9095393d34997cae8c568522d92b7ff1e4358e59a46be58453be8c5ac7da6042

  • SHA512

    4261f9a82d8c4b4867ac1946e0d0427e76ca80804340b93b6d59ba6c30eb21093f7dac918143763beb6b4674aea2734df89f31bf9afab6b811466eb933548376

  • SSDEEP

    24576:n9pfBeNtiWaDzOaB7E2qh/s3nI+msqTuToBGq1SN8:HioW0zOaB7E2C/s3IRDGqh

  Score

  10^/10

  bumblebee21macaloader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Bumblebee family

    bumblebee

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2