Extracted

• • Target

    stats.dll

  • Size

    1.4MB

  • MD5

    657682f71a10eafd869cf2d2bf793dff

  • SHA1

    db85130c620529b809a1993418a273548cf9d449

  • SHA256

    30bf36f75df541899e3954ca3a9efa96ae4a7d4fd268a8efb81605146ee7eaa2

  • SHA512

    7cb1797e8ed51ccb54dd0c6e5d7b95c2aa62f5a3ad17762ffa1a8377731dcb2f75b8c4607fca587d18b8499e85e87a03fec8b2f18ea46b3a4cd45abe450100e3

  • SSDEEP

    24576:huMrbr80bs3VdeOZNYu1Y6jFguq4Fn7GoMXt0cjWo9jaibETl:huMr3+VhNYu5j2xsnRqBC

  Score

  10^/10

  bumblebee276levasionloader

  • BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Bumblebee family

    bumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2