Trojan

Trojan:Win64/BumbleBee.EM!MTB malicious file

Malware Removal

The Trojan:Win64/BumbleBee.EM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win64/BumbleBee.EM!MTB virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win64/BumbleBee.EM!MTB?


File Info:

name: EF411C57A4EA779F2C8D.mlw
path: /opt/CAPEv2/storage/binaries/03c505eec2fcc3c6f875e21f49331a5546f1323ccfb8149be62b330423abb858
crc32: 622E0CDA
md5: ef411c57a4ea779f2c8ded9288c636b7
sha1: eeccdda90aeff6dbbd422e71b29a04bad0fbff19
sha256: 03c505eec2fcc3c6f875e21f49331a5546f1323ccfb8149be62b330423abb858
sha512: de0760da92af4974e74d7b67bb17d68729925a5ad0cd41ff30cf3ea5c990d51ad7071a50cd7558a9f60c2d63d8b1654a7e865810ffc665d39d240d2c06e03e44
ssdeep: 24576:2l70x0gt0nxZLHfHulAR02Sq2lr5ljm/91JGvd+mmiSyZHpVMXD+mwCyWJDH:J/I/OlARNSq2ShiVH7oZlJDH
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows
tlsh: T1C945E011E6921FF4D4B292B681AB252AB7347E1C4325D3B7ABC0D2373D837E05F16A64
sha3_384: 125562f371bb26056c9c527f7173aff885d5682e7a39864e8b770d7008678cac860633fb8bbea7d5b452135310469c89
ep_bytes: 4c894424188954241048894c24084883
timestamp: 2023-05-18 18:08:42

Version Info:

0: [No Data]

Trojan:Win64/BumbleBee.EM!MTB also known as:

BkavW64.AIDetectMalware
LionicTrojan.Win32.BumbleBee.a!c
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Ransom.BumbleBee.BO
CAT-QuickHealTrojan.GenericRI.S30221587
SkyhighBehavesLike.Win64.BumbleBee.tc
McAfeeBumbleBee-FVRZ!EF411C57A4EA
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.Ransom.BumbleBee.BO
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a5b881 )
AlibabaTrojanDownloader:Win64/BumbleBee.011b9d44
K7GWTrojan ( 005a5b881 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecTrojan.BumbleBee!g7
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win64/Bumblebee_AGen.C
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Downloader.Bumblebee-10003103-0
KasperskyHEUR:Trojan-Downloader.Win32.Convagent.gen
BitDefenderTrojan.Ransom.BumbleBee.BO
NANO-AntivirusTrojan.Win64.Convagent.kgqwjr
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin64:DropperX-gen [Drp]
TencentTrojan-DL.Win32.Convagent.kc
EmsisoftTrojan.Ransom.BumbleBee.BO (B)
F-SecureHeuristic.HEUR/AGEN.1364471
DrWebTrojan.Packed2.46042
ZillyaDownloader.BumbleBee.Win64.105
TrendMicroTrojan.Win64.BUMBLELOADER.YXEADZ
SophosTroj/Bumble-P
IkarusTrojan.Win64.Bumblebee
GDataTrojan.Ransom.BumbleBee.BO
JiangminTrojanDownloader.Convagent.fi
VaristW64/BumbleBee.L.gen!Eldorado
AviraHEUR/AGEN.1364471
Antiy-AVLVirus/Win64.Bumblebee.c
ArcabitTrojan.Ransom.BumbleBee.BO
ZoneAlarmHEUR:Trojan-Downloader.Win32.Convagent.gen
MicrosoftTrojan:Win64/BumbleBee.EM!MTB
GoogleDetected
AhnLab-V3Dropper/Win.DropperX-gen.R579720
ALYacTrojan.Ransom.BumbleBee.BO
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win64.BUMBLELOADER.YXEADZ
RisingDownloader.Convagent!8.123D1 (TFE:5:oJQ2Li0XMqI)
YandexTrojan.Bumblebee_AGen!0SiSWhiM0LQ
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.109656254.susgen
FortinetW64/Bumblebee.K!tr
AVGWin64:DropperX-gen [Drp]
DeepInstinctMALICIOUS

How to remove Trojan:Win64/BumbleBee.EM!MTB?

Trojan:Win64/BumbleBee.EM!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment