General
- Target tmpux9gvuwm
- Size 10.2MB
- Sample260609-batvcsav6m
- SHA256 bd9767ccf80f530171bddbfccd73f25679d67a34e3290f230245270ea45f02d7
Malware Config
Extracted
-
bumblebee
-
grp0003
-
dga
19ak90ckxyjxc.life
o2u1xbm9xoq4p.life
9b10t4vyvx6b5.life
9nl2a1qma4swd.life
gc9fctjq62t2e.life
apsgw881ol7rs.life
rmqa3jodwcmgd.life
85ur7zivhczam.life
evzftxl2qjfj4.life
cp2br7osw928r.life
lhunevjdxw5kz.life
jbrprj8im7aia.life
rdg0u5n7237r5.life
xwn7sukhzhbqv.life
8vh7uizstjhnb.life
u8karkeeu2qtj.life
j34duklow92k3.life
8sg769rvpe1lp.life
inkja7hekgcuv.life
r4a4n001s7uhi.life
r976ptnxbh52l.life
tv9jc206cpnyd.life
xf30997j6tp8z.life
nl2jkkuqs8efp.life
5395dg0j4h79n.life
v30ty639krk3p.life
oknzqkp6ph302.life
rlq13ng659buz.life
ey9n44bwtmjaw.life
trtiqjiry7k05.life
-
dga_seed
7941704092191845612
-
domain_length
13
-
num_dga_domains
300
-
port
443
-
tld
.life
Targets
-
- Target tmpux9gvuwm
- Size 10.2MB
- SHA256 bd9767ccf80f530171bddbfccd73f25679d67a34e3290f230245270ea45f02d7
Score10/10-
Family: BumbleBee
BumbleBee is a loader malware written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.