Overview

overview

10

Static

static

10

LoaderDLL.bin.dll

windows7-x64

10

LoaderDLL.bin.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    LoaderDLL.bin.exe
  • Size 1.4MB
  • Sample230304-k42azach21
  • SHA256 2d5c9b33ed298f5fb67ce869c74b2f2ec9179a924780da65fcbc1a0e0463c5d0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bumblebee202lgtrojan

Malware Config

Extracted

Family

  • bumblebee

rc4.plain

Extracted

Family

  • bumblebee

Botnet

  • 202lg

C2

  • 104.168.157.253:443

  • 209.141.40.19:443

  • 107.189.5.17:443

  • 23.254.167.63:443

  • 91.206.178.234:443

  • 146.19.173.86:443

  • 103.175.16.104:443

  • 194.135.33.85:443

  • 173.234.155.246:443

  • 51.68.144.43:443

  • 172.86.120.111:443

  • 160.20.147.242:443

  • 51.75.62.204:443

  • 205.185.113.34:443

  • 194.135.33.184:443

  • 23.82.140.155:443

  • 185.173.34.35:443

rc4.plain

Targets

    • Target
      LoaderDLL.bin.exe
    • Size 1.4MB
    • SHA256 2d5c9b33ed298f5fb67ce869c74b2f2ec9179a924780da65fcbc1a0e0463c5d0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    bumblebee202lgtrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks