Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Contract_0...62.exe

windows7-x64

10

Contract_0...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Contract_02_21_Copy#62.zip

  • Size

    909KB

  • Sample

    230222-hkxsbsab76

  • MD5

    811dcda73722046205cb005559f6d245

  • SHA1

    773eb60cc8c65e98c8bfd658d3e6639fcd8ec79e

  • SHA256

    5b542b33a23b8f4561421ee580dfbe75bc062f1486561aeafc2651fbf1f5c717

  • SHA512

    08bb9ea74920d61ecc290d13151178c799277a1999e8d5ed20c9f66ff1f32a9af544d9b9760aa9b79ebc3cbefaf460c02f64519a482388affcf81eaf64d793e7

  • SSDEEP

    24576:1b+VDG0psPelfG/K/i0lfa7xfQVHOVqanOzM7:1yxHJGIi0laxyH2q8

Score
10/10
bumblebee21macatrojan

Malware Config

Extracted

Family

bumblebee

Botnet

21maca

C2

108.62.141.20:443

104.168.140.145:443

51.68.145.171:443

108.62.118.170:443

192.119.72.133:443

23.108.57.201:443
rc4.plain

Targets

    • Target

      Contract_02_21_Copy#62.exe

    • Size

      1.4MB

    • MD5

      265823c02612858ba4ce8b8953a48d95

    • SHA1

      7452a48dffc4e5a2fdbb72531b0a4e123ce240e5

    • SHA256

      ccfac10bb3c4891323c4ea633ccb1e4afbc322541f594bf829e2864c7cab3fdc

    • SHA512

      6fb865d7a39fa9d9bab647a3c3946e6a5a26e1d5d219d1e6bc576788f463f258c8e4acb76ca40a2e8b7640957b2c53c375ba601b74ed404c3ef7921e611bad49

    • SSDEEP

      24576:IkA96A3job7wuLBVzKc8KJ4xc3dE0oTfs3erB:IzB30b7XtVJd3dE/E3Y

    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks