Malware hunting & reverse engineering notes Loaders, crypters, RATs, Windows internals and the tooling to take them apart.

Tags

#Extractor

1 article · feed for this tag

RE 5 min read

BumbleBee notes 🐝

BumbleBee is categorized as a Loader, the malware is used by Initial Access Brokers to gain access in targeted companies. This article aims to summarizing the different TTPs observed in campaigns distributing BumbleBee and provides a script to extract its configuration.