General

  • Target
    tmprd_mom_w
  • Size 1.9MB
  • Sample260609-a92htah18w
  • SHA256 e5e8a24a628b99b2172fee5d53f003ff097739dc5c23b4374d328d72f45813cd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • bumblebee

Botnet
  • err2

Attributes
  • dga

    7g342zvzn3uqq.life

    xsenlg0qhhi1b.life

    g0yw5p28hbx0s.life

    52szf55f8gmk8.life

    rkrjtpvvmeals.life

    17ek6ne63tvp1.life

    iwzkgwcv5ebat.life

    9n9tal4hw00ip.life

    6rzcyj1sswqm2.life

    b51lj50er7i5c.life

    7gup8m7nsh4bl.life

    pxu2liz19adny.life

    pdyckgp144x0w.life

    hsxe8ye2venfd.life

    oh6qtkwfuus46.life

    xigticnxbhrv8.life

    euod9uk8f3l81.life

    i6r4k2jo8giob.life

    9qnk0nmyswkvz.life

    3tkemqy8wipsj.life

    yo2blls44tlmy.life

    aftxgkj92l0in.life

    awov62djki4y0.life

    duhhgvdrjx5m8.life

    zucscj1mnafjq.life

    u0dvovexg8a9r.life

    94y5pkgk1etpy.life

    jced3p0f46gyy.life

    h3t6oau35fj9w.life

    ch7bk8l5jzsdy.life

  • dga_seed

    -7827392873490824478

  • domain_length

    13

  • num_dga_domains

    300

  • port

    443

  • tld

    .life

rc4.plain

Targets

    • Target
      tmprd_mom_w
    • Size 1.9MB
    • SHA256 e5e8a24a628b99b2172fee5d53f003ff097739dc5c23b4374d328d72f45813cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: BumbleBee

      BumbleBee is a loader malware written in C++.

    • Loads dropped DLL

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks