Bumblebee Malware Unveiled: Techniques, Threats, and Defense Strategies
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Msiexec - T1218.007 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Regsvr32 - T1218.010 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Masquerading - T1036 Powershell - T1086 Regsvr32 - T1117 Rundll32 - T1085 Masquerading
Show in Graph
Common Information
Type Value
UUID fc4bd5de-3b84-45bf-a2e8-fd1ddce4b0c0
Fingerprint a5e108196b7106c3
Analysis status DONE
Considered CTI value 2
Text language
Published Dec. 24, 2024, 4:14 a.m.
Added to db Dec. 24, 2024, 5:56 a.m.
Last updated Dec. 24, 2024, 5:57 a.m.
Headline Bumblebee Malware Unveiled: Techniques, Threats, and Defense Strategies
Title Bumblebee Malware Unveiled: Techniques, Threats, and Defense Strategies
Detected Hints/Tags/Attributes 46/3/24
Source URLs
Redirection Url
Details Source https://medium.com/@patelvidhi4288/bumblebee-malware-unveiled-techniques-threats-and-defense-strategies-b4029ca747d8?source=rss------malware-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
q905hr35.life
Details File 3 
y.msi
Details File 306 
msiexec.exe
Details File 1357 
powershell.exe
Details File 3 
midjourney.msi
Details File 5 
%appdata%\y.msi
Details File 1102 
rundll32.exe
Details File 498 
regsvr32.exe
Details File 1 
nvinstall.msi
Details File 1 
w_ver.dat
Details sha256 2 
2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb
Details sha256 1 
106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f
Details sha256 2 
c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9
Details sha256 1 
0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7
Details sha256 1 
d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3
Details sha256 1 
d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768
Details sha256 2 
7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115
Details IPv4 3 
193.242.145.138
Details IPv4 1 
213.139.205.131
Details IPv4 1 
193.176.190.41
Details Url 2 
http://193.242.145.138/mid/w1/midjourney.msi
Details Url 1 
http://193.176.190.41/down1/nvinstall.msi
Details Url 1 
http://213.139.205.131/update_ver
Details Url 1 
http://213.139.205.131/w_ver.dat