Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/03/2025, 12:08

General

  • Target

    7ffb92320000.ZipItNow.dll

  • Size

    2.1MB

  • MD5

    c24b1b0dfffda1000c57c43175d45352

  • SHA1

    6eea78c4654b8b747e1353676bd3ede263d6f45b

  • SHA256

    e9894d3254f683e578d28e9df0ae2a87bcd4f7b4864c3b2964ecd08c2bfeed35

  • SHA512

    7141de5e7404f9f8ea45134b02c38a731c1cb1a1fd309269ddd88708fc5f6e74213b67459e451f95508c3dcb5be5206786896115486f67ff17fe79dea8545f5f

  • SSDEEP

    49152:vC81ZlEREP0PF6vwlSCIuDFdC+ghElLr+StImsY:vNGm0P9SK6bhA

Score
10/10

Malware Config

Extracted

Family

bumblebee

Botnet

10111

Attributes
  • dga

    vca3utda017.click

    knvop5puf3w.click

    fuoor4i9488.click

    e27y0btovqa.click

    4td54jwr0zo.click

    8u1tf686x8r.click

    7rbvv9nr7ux.click

    0qlcz1igan7.click

    1ywg4j0oomt.click

    uk2cx2bz9oh.click

    mmh6zjh9rws.click

    tyv7socu189.click

    nu1ry3ywid2.click

    qbjc9488vee.click

    v8tarf4uflp.click

    nubhcl6uvd6.click

    pj2h7xw21zx.click

    n22xrd1xrto.click

    1age5rpmnbq.click

    s7ebb7t79vn.click

    t8vxfebri9r.click

    77ch3dlvcuc.click

    4k2znm7tg08.click

    ie4jzevdaka.click

    pweekbw7x9i.click

    dg4j9l1r2ay.click

    6linr1ga29p.click

    ae4fgatomcn.click

    i0rwy7k6rh8.click

    zrvvmchlzab.click

  • dga_seed

    7827833623176771557

  • domain_length

    11

  • num_dga_domains

    300

  • port

    443

  • tld

    .click

rc4.plain

Signatures

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\7ffb92320000.ZipItNow.dll
    1⤵
      PID:1780

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1780-0-0x00007FFA90380000-0x00007FFA905A3000-memory.dmp

      Filesize

      2.1MB