tmpnx5t2xem
Classification: Malicious
tmpnx5t2xem is a trojan (application/x-dosexec). Detected by 50 antivirus engines. Linked to Bumblebee malware. 13 sightings, last seen 2026-06-09.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 12 contacted hosts
- 158 DNS requests
MITRE ATT&CK associations
Malware families: BUMBLEBEE (S1039)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bumblebee | Triage | 2026-05-12 06:31:23 | 2026-06-09 01:00:02 | malicious-activity | S1039 Bumblebee |
| Generic Malware | Hybrid-Analysis | 2026-05-12 06:45:03 | 2026-05-12 06:45:03 | ||
| BumbleBee | MalwareBazaar Abuse.ch | 2025-07-09 11:30:24 | 2025-07-09 11:30:24 | malicious-activity | S1039 Bumblebee |
Tags
bumblebee grp0002 loaderSample information
- Filenames
- tmpnx5t2xem, tmprl4f4a3p, tmpx4wly6hl, tmpn3c6pq7p.dll, f204f90627a08dbe68547e8eefe5fc8961f39e728d007bf10b06f5c8433aad51.bin, Advanced-IP-Scanner.msi.dll
- File type
- application/x-dosexec
- MD5
e1f6546ebc8d9a299c292a540439a62c- SHA-1
ca30fc1df691bed72b69055bcdf26604ae52618a- SHA-256
f204f90627a08dbe68547e8eefe5fc8961f39e728d007bf10b06f5c8433aad51- First indexed
- 2025-07-09 12:19:45
- Last updated
- 2026-06-09 01:58:42
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Cylance | Unsafe |
| Elastic | malicious (high confidence) |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Paloalto | generic.ml |
| ALYac | Trojan.Agent.Bumblebee |
| AVG | Win64:MalwareX-gen [Misc] |
| AhnLab-V3 | Trojan/Win.Generic.C5777817 |
| Alibaba | Trojan:Win64/Bumblebee.422009b6 |
| Arcabit | Trojan.Generic.D4942491 |
| Avast | Win64:MalwareX-gen [Misc] |
| Avira | TR/AD.Nekark.rbqxy |
| BitDefender | Trojan.GenericKD.76817553 |
| Bkav | W32.Common.8AE52BD9 |
| CAT-QuickHeal | Trojan.Ghanarava.175367684039a62c |
| CTX | dll.trojan.bumblebee |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | Win64/Bumblebee.O |
| Emsisoft | Trojan.GenericKD.76817553 (B) |
| F-Secure | Trojan.TR/AD.Nekark.rbqxy |
| Fortinet | W32/PossibleThreat |
| GData | Trojan.GenericKD.76817553 |
| Detected | |
| Gridinsoft | Trojan.Win64.Gen.tr |
| Ikarus | Trojan.Win64.Agent |
| K7AntiVirus | Trojan ( 005aeaaf1 ) |
| K7GW | Trojan ( 005aeaaf1 ) |
| Lionic | Trojan.Win32.Bumblebee.4!c |
| Malwarebytes | Malware.AI.4283351965 |
| MaxSecure | Trojan.Malware.395549679.susgen |
| McAfeeD | ti!F204F90627A0 |
| MicroWorld-eScan | Trojan.GenericKD.76817553 |
| Microsoft | Trojan:Win64/Bumblebee!rfn |
| Panda | Trj/Chgt.AD |
| Rising | Trojan.Bumblebee!8.15A15 (CLOUD) |
| Sangfor | Trojan.Win64.Bumblebee.Vxuf |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.149730bc |
| TrellixENS | Artemis!E1F6546EBC8D |
| TrendMicro | TROJ_GEN.R002C0DGE25 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DGE25 |
| VIPRE | Trojan.GenericKD.76817553 |
| Varist | W64/ABTrojan.GOQL-0179 |
| Xcitium | Malware@#3petpmjcsk8ri |
| Zillya | Trojan.Bumblebee.Win64.70 |
| alibabacloud | Trojan:Win/Bumblebee.O |
| huorong | Trojan/BumbleBee.ad |
Network contacts
104.26.12.205 104.26.13.205 109.205.195.211 150.171.27.12 150.171.28.12 171.22.183.43 172.67.74.152 194.127.178.21 204.79.197.203 23.220.246.139 23.220.246.145 84.200.193.53
DNS requests
011jn31n05qzpp.org 01t05hb4armbco.org 0auc4opinnfh1q.org 0ja41rz8tt8w79.org 0jfv3ru6slys8b.org 0reih6vwzswljn.org 0youdp14i4r4h5.org 1074slp8zafyz3.org 13ov5ypehzqx5l.org 15eaytwast9oig.org 164r969k1ukm08.org 177hdmsutlfyqg.org 18xsm4245vgytb.org 1ge03xy5vtwn5s.org 1v6pqsve9hg3gy.org 2gdaqm18d6p9d8.org 2i0nq29y5xdgcb.org 2jncqdqmsdqcaf.org 2rxyt9urhq0bgj.org 2x51hwe9cnidu4.org 2yr46kghd39ise.org 3h98rycjvt3gj5.org 3nux6z16ieip7u.org 3pu8prnkr8v31d.org 3pvk0zw1k7g28h.org 54jmh8bnrpha7y.org 54koqynag1148v.org 560tvzwrobbl2k.org 5afyc7zxdwetb7.org 5ka8rxp6t6eup2.org 5sm4tii0w4lnu2.org 6cimu4mc085em8.org 6nnykp2aycmayg.org 7p788ywb3z9fwe.org 7v6chp4bfor6ie.org 8doj8uvx604eck.org 8qoy7s4f9eypvu.org 958xz3300iu8oe.org 9g055w2ak8hd6t.org 9lwaixm8plvds4.org acl1omagtzq38v.org ae7a1pbhn5ytpe.org aelovxoinqta4a.org avm2dir92zqv9x.org b2aa1e67emw8ln.org bhvhbmjmni7a51.org bvt69kywl2s8rg.org cjjmbramcs7wta.org cjlv1576zqgb47.org cybf5coa1t2xr2.org