MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

BumbleBee

Vendor detections: 9

Intelligence 9 IOCs YARA 1 File information Comments

SHA256 hash:	38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc
SHA3-384 hash:	d3fcda89dee7a24058d09bf63bf219a159fad70e438dfd53716c148fa577c0099a95b1d4f1e7e8e6aac7b3740c1ce2b8
SHA1 hash:	d2e31a96af911a0cf932ec860ce839e254fbd5c8
MD5 hash:	e51378e49d1aa79ce88c018d748a186c
humanhash:	alpha-alpha-zebra-romeo
File name:	793017fd-3fd3-4b2c-b4cd-5041fde3b4e3.pdf
Download:	download sample
Signature	BumbleBee Create hunting rule
File size:	16'792 bytes
First seen:	2024-12-05 04:15:57 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	384:9q3MsrhjEN4gQ3micNexY27IEPCUSkSaHTeOHAgJlATCUSN:9q3prh04d2aFU2dHTDHv62
TLSH	T1CA728D76D89C5C5CF0E34707966A7C4E4CBD718387E07A9831B51B49ED8A940BB224FB
Magika	pdf
Reporter	abuse_ch
Tags:	BUMBLEBEE pdf

Intelligence

File Origin

# of uploads :

# of downloads :

445

Origin country :

Vendor Threat Intelligence

Detection(s):

SecuriteInfo.com.PDF.MalwareX-gen.30802.855.UNOFFICIAL

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67512903bc8c6beb3075d934

Tags:

sage remo hype

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc/results/dashboard

Verdict:

Unknown

Threat level:

2.5/10

Confidence:

100%

Tags:

action phishing

Link:

https://www.filescan.io/uploads/675129042fd9f38207a416ea/reports/399f0417-a453-4327-90a0-04e4bc874b2f/overview

Verdict:

Suspicious

Labled as:

Malware_

Link:

https://www.hybrid-analysis.com/sample/38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc

Label:

Malicious

Suspicious Score:

9.8/10

Score Malicious:

99%

Score Benign:

Link:

https://www.malware.ai/gui/files/?id=c5f565bc-0a47-45a0-a9be-fbf21cc7410d

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1568873

Signature

AI detected landing page (webpage, office document or email)

Antivirus detection for URL or domain

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

PDF

Link:

https://malprob.io/report/38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc/

Threat name:

Document-PDF.Trojan.Heuristic

Status:

Malicious

First seen:

2024-12-05 04:16:04 UTC

File Type:

Document

Extracted files:

AV detection:

5 of 24 (20.83%)

Threat level:

2/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hd4pedvoa3sxle4p7pvwjyy4smiorqflkcrlyiy7hkuxo6v4hw6a._file

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Bumblebee

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/38f8f20eae06e575938ffbeb64e31c9310e8c0ab50a2bc231f3aa9777abc3dbc

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	Sus_Obf_Enc_Spoof_Hide_PE Create hunting rule
Author:	XiAnzheng
Description:	Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)