General

  • Target

    d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910.zip

  • Size

    612KB

  • MD5

    025c9de4d61f8c8d8184c2a273704857

  • SHA1

    c8ed068f1a79ca4143a0ffb1e7721380a0c48f97

  • SHA256

    d1ed15a69c112b048936201fe8e816828346168cf02838086d89843a4041b94b

  • SHA512

    e6181f501cbc5acf05274ac47dd7be6aae6c18805438de967f35a30ece042680aef9005b97f6b30d1fa30eb737b0958a6ca6fbcb4450604babb9c0b4e146926b

  • SSDEEP

    12288:uOxu4a8Vx+nsHER1jJ1P3Gx0i1wYNjj9BUPeactCY:uOwcx4sM1jJ1PWxTBdj9AU

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

mc1905

C2

92.119.178.40:443

32.54.188.44:443

194.135.33.160:443

192.198.82.59:443

103.175.16.151:443

rc4.plain

Signatures

  • Bumblebee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910.zip
    .zip

    Password: infected

  • d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910
    .dll windows:6 windows x64 arch:x64

    2fe2e7082a95cdfb4a2c89d515c31d6e


    Headers

    Imports

    Exports

    Sections