Analysis
- max time kernel
149s - max time network
148s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/06/2026, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
tmp69bv9056.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
tmp69bv9056.dll
Resource
win10v2004-20260513-en
General
- Target tmp69bv9056.dll
- Size 2.6MB
- Sample260609-bfkhwaaw2n
- SHA256 5e2382ba5822edc0780c09f58a5a13bc737ac9cc846d89a93a862a64262947ea
- MD5 35c783567e26df468686248c5b0fafa7
- SHA1 a5075f53216abf7b5b4f7a7bbe76995e07f6eb25
- SHA512 f8cfd956b7273446ee8fb39f769696277f150f56bdcd36972f7955afa9cdd21e36d4f1885fb3bb45dd29222e6821d00049551f00e51e54f11e48461d1f4b25ab
- SSDEEP 49152:+0/65Hg2Bu2zCGBC2xzT1DjmtbsuGyeoLn6w:34TzTuz0oLn6w
- TLSH T18CC55A062B3F4A9DC514C4BE967B1263D569BD0CD028B8758DC04F457FA2F60A2BA7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
-
bumblebee
-
grp0005
-
dga
19ak90ckxyjxc.life
o2u1xbm9xoq4p.life
9b10t4vyvx6b5.life
9nl2a1qma4swd.life
gc9fctjq62t2e.life
apsgw881ol7rs.life
rmqa3jodwcmgd.life
85ur7zivhczam.life
evzftxl2qjfj4.life
cp2br7osw928r.life
lhunevjdxw5kz.life
jbrprj8im7aia.life
rdg0u5n7237r5.life
xwn7sukhzhbqv.life
8vh7uizstjhnb.life
u8karkeeu2qtj.life
j34duklow92k3.life
8sg769rvpe1lp.life
inkja7hekgcuv.life
r4a4n001s7uhi.life
r976ptnxbh52l.life
tv9jc206cpnyd.life
xf30997j6tp8z.life
nl2jkkuqs8efp.life
5395dg0j4h79n.life
v30ty639krk3p.life
oknzqkp6ph302.life
rlq13ng659buz.life
ey9n44bwtmjaw.life
trtiqjiry7k05.life
9vgvnzk51j1sy.life
wi88w99xo9zlt.life
hoieva2gl9tzx.life
7oo4hxt5haih5.life
ey8axyn00x8sf.life
kks80hyrpbmuz.life
zom3rkt078g1k.life
n2cy5wx4nfs8n.life
qnw1tsg4ogxa0.life
84ntpl4mk4cwm.life
m5f2awao92hp9.life
nq0tsip71ecq5.life
ithg3ysseil61.life
mvp5pt36h20vf.life
51415jvbttwu4.life
l0ecv85wptocs.life
nuq0isjlua30l.life
wd7jo4d8zlxg0.life
2885patz8ovcf.life
1zwze7b6jqovz.life
s23kd323qzj2l.life
4me127ppi31at.life
eifir9x2xpqsb.life
4hlnzokni29fh.life
ykv99faqy3ky4.life
bgiphdk30zk35.life
8n3rj69ohv8rv.life
29e8eji42sktd.life
bqlbyaavprz19.life
qj2suuu4ixgvf.life
b2ys2fltibnfu.life
z0lg8lijtw3mh.life
p3arx0taom00w.life
gquyy1qf8ncn7.life
ref18bh4aku24.life
epqykfhm5zq6l.life
zw96t31o1h768.life
c45ze0b5hhvdg.life
6kjpjs3v34hbf.life
qhyut7e0tjz2a.life
5p9udlfi4yvg6.life
5ew1715l4z3ef.life
xfi23ljskvgtg.life
ofvs2a3nhyrqi.life
7o3zfbd5rf5mz.life
flewo6le618h7.life
r7rw9inm558jg.life
7qjjcy6vg835x.life
8sz83ieffpzwj.life
0eftob9vxa877.life
0j62jm3djgxe7.life
v2vijxyqbqsbl.life
vuu79f2ne8xl1.life
ew3crbjgfbbhd.life
lqhhfpiqp5chx.life
f3be5ccj5ioc7.life
1ngmbwokqkiov.life
nh0hujf2w5xi9.life
daxbkb16ebdao.life
m4ivqiz0weqy7.life
0ei4jxf0cszgd.life
54zgxvq8jzq81.life
tesc2obtfbdke.life
w1nd36e506qqi.life
fc4v5wx4p4syq.life
43wubiwvmajs3.life
4w1b7rsnyg3sm.life
h8gw0cbhkkrrf.life
k2yu4bhadklet.life
wqfvb1lom02cg.life
-
dga_seed
7941704092191845612
-
domain_length
13
-
num_dga_domains
300
-
port
443
-
tld
.life
Signatures
- Badlisted process makes network request 64 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 1 4336 rundll32.exe 2 4336 rundll32.exe 3 4336 rundll32.exe 4 4336 rundll32.exe 5 4336 rundll32.exe 6 4336 rundll32.exe 7 4336 rundll32.exe 8 4336 rundll32.exe 9 4336 rundll32.exe 10 4336 rundll32.exe 11 4336 rundll32.exe 12 4336 rundll32.exe 13 4336 rundll32.exe 14 4336 rundll32.exe 15 4336 rundll32.exe 16 4336 rundll32.exe 17 4336 rundll32.exe 18 4336 rundll32.exe 19 4336 rundll32.exe 20 4336 rundll32.exe 21 4336 rundll32.exe 22 4336 rundll32.exe 23 4336 rundll32.exe 24 4336 rundll32.exe 25 4336 rundll32.exe 26 4336 rundll32.exe 27 4336 rundll32.exe 28 4336 rundll32.exe 29 4336 rundll32.exe 30 4336 rundll32.exe 31 4336 rundll32.exe 32 4336 rundll32.exe 33 4336 rundll32.exe 34 4336 rundll32.exe 35 4336 rundll32.exe 36 4336 rundll32.exe 37 4336 rundll32.exe 38 4336 rundll32.exe 39 4336 rundll32.exe 40 4336 rundll32.exe 41 4336 rundll32.exe 42 4336 rundll32.exe 43 4336 rundll32.exe 44 4336 rundll32.exe 45 4336 rundll32.exe 46 4336 rundll32.exe 47 4336 rundll32.exe 48 4336 rundll32.exe 49 4336 rundll32.exe 50 4336 rundll32.exe 51 4336 rundll32.exe 52 4336 rundll32.exe 53 4336 rundll32.exe 54 4336 rundll32.exe 57 4336 rundll32.exe 58 4336 rundll32.exe 59 4336 rundll32.exe 60 4336 rundll32.exe 61 4336 rundll32.exe 62 4336 rundll32.exe 63 4336 rundll32.exe 64 4336 rundll32.exe 65 4336 rundll32.exe 66 4336 rundll32.exe