Extracted

• • Target
    tmpcdhjz3b5
  • Size 34.3MB
  • SHA256 9514b84abed58ad7c02e39020c8847b80975e5d49cea5d33f22c75af3c3db583
  • MD5 93730d57460c98988ac0f6931f87de19
  • SHA1 9adc9c86a6a6f17fa49eb0ed91ebb9f22e8a55cf
  • SHA512 8c30dbd3cb86b83ffd57bf5d69eece490c48639d1d0d2e91f4fcf8f2cebcd6ac3173895253da330dd607916a6fcb768a26a3e3b11bb2697e3a8ece957614d342
  • SSDEEP 786432:qdXBf4jWnEPxzIITlZqnJeWVmJq8JGjIj/D:qFZ4SEJzIITwLWx3
  • TLSH
    T15B77337B695EEB37CA411074AD232C5D9571BC08B6E25422E3ACFC62CDF799301BAD84
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  grp0005discoverybumblebeeloaderpersistenceprivilege_escalationransomware

  • Family: BumbleBee

    BumbleBee is a loader malware written in C++.

    loaderbumblebee

  • Executes dropped EXE

  • Loads dropped DLL

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2behavioral3