General

  • Target

    2025-01-01_c3a5ed0ab97ade95dbbe7f7703f9a9d0_ryuk

  • Size

    5.0MB

  • Sample

    250101-c5ppkatpdp

  • MD5

    c3a5ed0ab97ade95dbbe7f7703f9a9d0

  • SHA1

    39849ac9781608c1cc061f44bd1eb57d4bee7e6f

  • SHA256

    c5d121dc9c31368dcbf0da9d2aaaae61944c7e76a20363ed16d620e4574f0aaa

  • SHA512

    ca7072f0245941e752390f6cfe3061676cce63cb5e15032796fba7079612dc5dffb67049af5431c6ef2031f2960d5efbe576e23733fed35e70e37ad8fbf8ba2e

  • SSDEEP

    49152:vvOq8WN5HNUEK9Ge6HkftitNetjxDD14YR4AAiX92Y3ONnWKpfK4g:XOq8az2Ge6StJdSsORFfq

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

933

Attributes
  • dga

    9qlg6ojje0fh.life

    t120o0lqyzjk.life

    etptzwxsyp32.life

    r8odycmtgooa.life

    nb56cfxd01nr.life

    xyz5fpz6im57.life

    y4yhop208nes.life

    cvggxnytt623.life

    7zaolm729xjw.life

    fkgm8tb8fwky.life

    rqyuhu82y5ro.life

    rato5okc78nh.life

    c1yp2qhm7efl.life

    5vi9zf66i5rn.life

    ydi1tars4qo5.life

    l1bfvyx5yr8e.life

    s5lxi812qbt5.life

    37jnlxcobt19.life

    1uwsarbntiak.life

    x5mbn2n8j0wn.life

    r3geabq7zf8o.life

    lxsq535scirs.life

    vuftqxjdst36.life

    ks4bjt91jriw.life

    zj9lg3qke1k5.life

    0ndr4p83d77l.life

    ykk98pvhd6jy.life

    dlkim3cw0wt8.life

    tliy48rr6fi7.life

    xk9g4w9g1m0o.life

  • dga_seed

    3171302928008992269

  • domain_length

    12

  • num_dga_domains

    300

  • port

    443

rc4.plain

Targets

    • Target

      2025-01-01_c3a5ed0ab97ade95dbbe7f7703f9a9d0_ryuk

    • Size

      5.0MB

    • MD5

      c3a5ed0ab97ade95dbbe7f7703f9a9d0

    • SHA1

      39849ac9781608c1cc061f44bd1eb57d4bee7e6f

    • SHA256

      c5d121dc9c31368dcbf0da9d2aaaae61944c7e76a20363ed16d620e4574f0aaa

    • SHA512

      ca7072f0245941e752390f6cfe3061676cce63cb5e15032796fba7079612dc5dffb67049af5431c6ef2031f2960d5efbe576e23733fed35e70e37ad8fbf8ba2e

    • SSDEEP

      49152:vvOq8WN5HNUEK9Ge6HkftitNetjxDD14YR4AAiX92Y3ONnWKpfK4g:XOq8az2Ge6StJdSsORFfq

    Score
    10/10
    • BumbleBee

      BumbleBee is a loader malware written in C++.

    • Bumblebee family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks