Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

a8a25ee71c...03.exe

windows7-x64

10

a8a25ee71c...03.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1990576c1cc7270e841955ee847917ed.bin

  • Size

    806KB

  • Sample

    230223-bc6xpsec45

  • MD5

    7a8d7998b82acd236b86c254c7c7def6

  • SHA1

    489ee6d16440db2112280615ecb73042a1431e14

  • SHA256

    d93f6d3e5991b95e883ff6d3ee17f55a0c7730a2a65b1ff61d9f8b26594f6aec

  • SHA512

    f2ad979ac891cf6cf7c7f5e78bb9ae03f8baad131133b9ea94f00ac1527af4373fb50126e87e30a105db035365a31d17c0ca15c8f4d68d3e9bef88e3adcd9eb7

  • SSDEEP

    24576:+dovUlnCmlBKm/f5QtpbEP9ay2ZpBc7QrPCxB:0ovU1CmfbKJEP9e/eQuxB

Score
10/10
bumblebee17macatrojan

Malware Config

Extracted

Family

bumblebee

Botnet

17maca

C2

108.62.141.20:443

23.108.57.201:443

108.62.118.170:443
rc4.plain

Targets

    • Target

      a8a25ee71c0e8e4a06cd1573271672b871f78eba5f41803ffda6f14006c81803.exe

    • Size

      940KB

    • MD5

      1990576c1cc7270e841955ee847917ed

    • SHA1

      6a1bdc104349419f7f103407ab43451f0d2e5db2

    • SHA256

      a8a25ee71c0e8e4a06cd1573271672b871f78eba5f41803ffda6f14006c81803

    • SHA512

      5af0f72faf2577ebe1774be32529e6c922b80577d10695706470d7ae5ef8cb482650889e75b7a27bf73c9b45d58d82ae1e1591579155e7494033a4339507013b

    • SSDEEP

      12288:nwqAuOKfZ2j/7LB3qy/lj41q/ypBmP0WbLVgk/6oQZrvXwkr9kqTDPgTzJm:nwoOZl6SJ5vBbXit5xETzJm

    Score
    10/10
    bumblebee17macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks