General
- Target tmps3mxcb4g
- Size 21.7MB
- Sample260609-bc995aav8m
- SHA256 69d3cf7d850bd05b3a901bc923f3c48392cedc1f863e6fe2b44e07096a180905
Malware Config
Extracted
-
bumblebee
-
grp0002
-
dga
ev2sirbd269o5j.org
ijt0l3i8brit6q.org
ewujsfb1dp5ran.org
8doj8uvx604eck.org
kwywztxoo2xdot.org
2rxyt9urhq0bgj.org
ky1d1p1daahe5t.org
ovh1kn1tcqw5kp.org
6cimu4mc085em8.org
5ka8rxp6t6eup2.org
ks50ioz9nm3v05.org
v5rjsdqogstopr.org
epnl524h4k03mu.org
hpzmehtnkk4q22.org
ygvmhd7ll9v2nu.org
oovlcxvht9kupu.org
1074slp8zafyz3.org
vfwlzltibeg7ne.org
wp67lr8ysypurn.org
1ge03xy5vtwn5s.org
958xz3300iu8oe.org
dlbqduy9gjprko.org
tycl4o5dep10cd.org
ui9bex45gw70az.org
trj1qy559ygvx3.org
w823niq7veztr9.org
01t05hb4armbco.org
igl71zhw25qw3d.org
j8ku0xu0dqduxr.org
jy3y61q6hyhf4c.org
-
dga_seed
4792266342353752649
-
domain_length
14
-
num_dga_domains
300
-
port
443
-
tld
.org
Targets
-
- Target tmps3mxcb4g
- Size 21.7MB
- SHA256 69d3cf7d850bd05b3a901bc923f3c48392cedc1f863e6fe2b44e07096a180905
Score10/10-
Family: BumbleBee
BumbleBee is a loader malware written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.