General
- Target tmp6x_0z8uq
- Size 9.3MB
- Sample260609-bagj2aav6j
- SHA256 27487060866209922c13a92bbcc3457fbbf977f5aaff25e199778e8a023d9c24
- MD5 bd99a02d8afdc468d315d47870202198
- SHA1 67d6e46cf006d34d7606c03f48052fcd7af58d86
- SHA512 e8b1aee097276a6a77f76daa99676a62843e310277027a08d538f6504b6babf498f1a5776e233783f9322fe2028bec10e2b789ef3ef2cecdf82752fa2239d9e4
- SSDEEP 196608:YKhpGIqbo0qpUd5DxbN9QZc1GmbL8bdeIlntj/8/Vy5XgLF9fmR2Q:Y+RGdt0ckmcb8IltzvxgTm
- TLSH T17EA6336E3BB8A70BC73E75B499931280804EACD352C8F846F25DF7A833787606E55356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
tmp6x_0z8uq.msi
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
tmp6x_0z8uq.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
tmp6x_0z8uq.msi
Resource
win11-20260513-en
Malware Config
Extracted
-
bumblebee
-
rvt1
-
dga
7g342zvzn3uqq.life
xsenlg0qhhi1b.life
g0yw5p28hbx0s.life
52szf55f8gmk8.life
rkrjtpvvmeals.life
17ek6ne63tvp1.life
iwzkgwcv5ebat.life
9n9tal4hw00ip.life
6rzcyj1sswqm2.life
b51lj50er7i5c.life
7gup8m7nsh4bl.life
pxu2liz19adny.life
pdyckgp144x0w.life
hsxe8ye2venfd.life
oh6qtkwfuus46.life
xigticnxbhrv8.life
euod9uk8f3l81.life
i6r4k2jo8giob.life
9qnk0nmyswkvz.life
3tkemqy8wipsj.life
yo2blls44tlmy.life
aftxgkj92l0in.life
awov62djki4y0.life
duhhgvdrjx5m8.life
zucscj1mnafjq.life
u0dvovexg8a9r.life
94y5pkgk1etpy.life
jced3p0f46gyy.life
h3t6oau35fj9w.life
ch7bk8l5jzsdy.life
iy4sgebvy7irq.life
pg3k818fzjx8x.life
q2afcbxeqvlvp.life
yrdzyc58ivnz2.life
5rysu08g3k6gc.life
cbo4qfnw25cvh.life
q77e1ox1itdb4.life
s7m284fqxpzmw.life
p55dbejqk240n.life
lbrizkb47cwrc.life
hl81xtzjv36jf.life
3rv3hcanv2go8.life
mw3bn6jeeodm5.life
4j20prz1zjnfj.life
o10m4i9qkdlym.life
62mqkuu1q1o15.life
i8670z8zhfp8t.life
ww9uswruc5bfm.life
c11t50tj3160n.life
mlxjgjbdkpww3.life
zel0o851i608p.life
n5xvvdz9y896o.life
5zf7kj41fuqr9.life
dhfl9u35aao7j.life
8svblqs899cjr.life
b05tsf8p68rbe.life
hik8gmiewwu0r.life
y3vmprmb726we.life
dtramz0feg4dw.life
yx1zja0dj8qju.life
r23sxlqhzx8vg.life
i32jgcz842stw.life
e7rn9f4gseyzp.life
ol3sj2hi7bb2c.life
9kb3iv3ou95tt.life
wf8gacjbp9imr.life
39werlh4rv5s8.life
ptr5rfuuq7juc.life
eh8gll5bhpt91.life
dg0ffst21bgvr.life
i0unymq8nqf8e.life
m0b88ot97bjsb.life
c66pqivko6n8o.life
agp9y0wg814pa.life
i449op4jt9r92.life
ll5q20efbibpr.life
23hixodoyv0dd.life
c2euwefme48jz.life
r17o8laaolhog.life
fcung4iggr5p3.life
di1cn3vl5228i.life
pqoq7q5lty905.life
zn4fgfonyn1qn.life
0gh9do46p1l2y.life
cjglyj70nhu28.life
9vueh00h1bdwv.life
44n306fqocyhv.life
ox6pb5okf6aoh.life
37hrryyz275k8.life
8cx1dqbdb6ch8.life
jjpz3ywa12xe7.life
kw6ahe9ib2rxc.life
6gl5viz85n1mt.life
iikz0tznluj1j.life
13zljo99byc7n.life
zf20ias6u41qg.life
qv3f3zwf9brmd.life
dzydy8wal311h.life
qd0gy4oktstgt.life
o64zkgme71j8y.life
-
dga_seed
-7827392873490824478
-
domain_length
13
-
num_dga_domains
300
-
port
443
-
tld
.life
Targets
-
- Target tmp6x_0z8uq
- Size 9.3MB
- SHA256 27487060866209922c13a92bbcc3457fbbf977f5aaff25e199778e8a023d9c24
- MD5 bd99a02d8afdc468d315d47870202198
- SHA1 67d6e46cf006d34d7606c03f48052fcd7af58d86
- SHA512 e8b1aee097276a6a77f76daa99676a62843e310277027a08d538f6504b6babf498f1a5776e233783f9322fe2028bec10e2b789ef3ef2cecdf82752fa2239d9e4
- SSDEEP 196608:YKhpGIqbo0qpUd5DxbN9QZc1GmbL8bdeIlntj/8/Vy5XgLF9fmR2Q:Y+RGdt0ckmcb8IltzvxgTm
- TLSH T17EA6336E3BB8A70BC73E75B499931280804EACD352C8F846F25DF7A833787606E55356
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.