misp-galaxy:mitre-attack-pattern="Hijack Execution Flow - T1574",misp-galaxy:mitre-attack-pattern="Indicator Removal on Host - T1070",misp-galaxy:mitre-attack-pattern="Process Injection - T1055",misp-galaxy:mitre-attack-pattern="Execution Guardrails - T1480",misp-galaxy:mitre-attack-pattern="Boot or Logon Autostart Execution - T1547",misp-galaxy:mitre-attack-pattern="Boot or Logon Initialization Scripts - T1037",misp-galaxy:mitre-attack-pattern="Create or Modify System Process - T1543",misp-galaxy:mitre-attack-pattern="Keylogging - T1056.001",misp-galaxy:mitre-attack-pattern="Input Capture - T1417",misp-galaxy:mitre-attack-pattern="Input Capture - T1056",misp-galaxy:mitre-attack-pattern="Gather Victim Host Information - T1592",misp-galaxy:mitre-attack-pattern="Web Protocols - T1071.001",misp-galaxy:mitre-attack-pattern="Bypass User Access Control - T1548.002",misp-galaxy:mitre-attack-pattern="Proxy - T1090",misp-galaxy:mitre-attack-pattern="Symmetric Cryptography - T1573.001",misp-galaxy:mitre-attack-pattern="Malware - T1587.001",misp-galaxy:malpedia="BumbleBee",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,misp-galaxy:tool="BumbleBee",ecsirt:intrusions="backdoor",veris:action:malware:variety="Backdoor",ms-caro-malware:malware-type="Backdoor",ms-caro-malware-full:malware-type="Backdoor",misp-galaxy:malpedia="Bookworm",misp-galaxy:tool="Bookworm"