General

  • Target
    tmp69bv9056
  • Size 2.6MB
  • Sample260609-bfkhwaaw2n
  • SHA256 5e2382ba5822edc0780c09f58a5a13bc737ac9cc846d89a93a862a64262947ea
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • bumblebee

Botnet
  • grp0005

Attributes
  • dga

    19ak90ckxyjxc.life

    o2u1xbm9xoq4p.life

    9b10t4vyvx6b5.life

    9nl2a1qma4swd.life

    gc9fctjq62t2e.life

    apsgw881ol7rs.life

    rmqa3jodwcmgd.life

    85ur7zivhczam.life

    evzftxl2qjfj4.life

    cp2br7osw928r.life

    lhunevjdxw5kz.life

    jbrprj8im7aia.life

    rdg0u5n7237r5.life

    xwn7sukhzhbqv.life

    8vh7uizstjhnb.life

    u8karkeeu2qtj.life

    j34duklow92k3.life

    8sg769rvpe1lp.life

    inkja7hekgcuv.life

    r4a4n001s7uhi.life

    r976ptnxbh52l.life

    tv9jc206cpnyd.life

    xf30997j6tp8z.life

    nl2jkkuqs8efp.life

    5395dg0j4h79n.life

    v30ty639krk3p.life

    oknzqkp6ph302.life

    rlq13ng659buz.life

    ey9n44bwtmjaw.life

    trtiqjiry7k05.life

  • dga_seed

    7941704092191845612

  • domain_length

    13

  • num_dga_domains

    300

  • port

    443

  • tld

    .life

rc4.plain

Targets

    • Target
      tmp69bv9056
    • Size 2.6MB
    • SHA256 5e2382ba5822edc0780c09f58a5a13bc737ac9cc846d89a93a862a64262947ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: BumbleBee

      BumbleBee is a loader malware written in C++.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

MITRE ATT&CK Matrix

Tasks