General

  • Target
    tmpo5aj8jpp
  • Size 2.1MB
  • Sample260609-ba1mxaav6n
  • SHA256 d0e7203d244c0a79078533bcaddc2236af5dbbff7240a346934fbe904a1230c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • bumblebee

Botnet
  • err1

Attributes
  • dga

    7g342zvzn3uqq.life

    xsenlg0qhhi1b.life

    g0yw5p28hbx0s.life

    52szf55f8gmk8.life

    rkrjtpvvmeals.life

    17ek6ne63tvp1.life

    iwzkgwcv5ebat.life

    9n9tal4hw00ip.life

    6rzcyj1sswqm2.life

    b51lj50er7i5c.life

    7gup8m7nsh4bl.life

    pxu2liz19adny.life

    pdyckgp144x0w.life

    hsxe8ye2venfd.life

    oh6qtkwfuus46.life

    xigticnxbhrv8.life

    euod9uk8f3l81.life

    i6r4k2jo8giob.life

    9qnk0nmyswkvz.life

    3tkemqy8wipsj.life

    yo2blls44tlmy.life

    aftxgkj92l0in.life

    awov62djki4y0.life

    duhhgvdrjx5m8.life

    zucscj1mnafjq.life

    u0dvovexg8a9r.life

    94y5pkgk1etpy.life

    jced3p0f46gyy.life

    h3t6oau35fj9w.life

    ch7bk8l5jzsdy.life

  • dga_seed

    -7827392873490824478

  • domain_length

    13

  • num_dga_domains

    300

  • port

    443

  • tld

    .life

rc4.plain

Targets

    • Target
      tmpo5aj8jpp
    • Size 2.1MB
    • SHA256 d0e7203d244c0a79078533bcaddc2236af5dbbff7240a346934fbe904a1230c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: BumbleBee

      BumbleBee is a loader malware written in C++.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

MITRE ATT&CK Matrix

Tasks