Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d43e38f21e7617b81b8a3cab0af3a30d31b0ab4234b02efdba332f3b25c7350a

  • Size

    1.7MB

  • Sample

    231005-16dwfshf57

  • MD5

    487026e70c9c38f46b5427c99406ea65

  • SHA1

    19b19197859083967c083bd0a33697c10c8d5c20

  • SHA256

    d43e38f21e7617b81b8a3cab0af3a30d31b0ab4234b02efdba332f3b25c7350a

  • SHA512

    22b132644c36c6ac6493cc021d51ca7af4b2e8b83b98071e351863fe7aa21d178f4bc504f55d0214be0129a0f9d1710e57f99cd054f18c43aa743e04ef85d1be

  • SSDEEP

    24576:HVxY5A0vimILMPcVJT6gH/A2Z46a9Dhvhb64a3f:H/0vimILMP4V6SAO46a3vE4Ef

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      d43e38f21e7617b81b8a3cab0af3a30d31b0ab4234b02efdba332f3b25c7350a

    • Size

      1.7MB

    • MD5

      487026e70c9c38f46b5427c99406ea65

    • SHA1

      19b19197859083967c083bd0a33697c10c8d5c20

    • SHA256

      d43e38f21e7617b81b8a3cab0af3a30d31b0ab4234b02efdba332f3b25c7350a

    • SHA512

      22b132644c36c6ac6493cc021d51ca7af4b2e8b83b98071e351863fe7aa21d178f4bc504f55d0214be0129a0f9d1710e57f99cd054f18c43aa743e04ef85d1be

    • SSDEEP

      24576:HVxY5A0vimILMPcVJT6gH/A2Z46a9Dhvhb64a3f:H/0vimILMP4V6SAO46a3vE4Ef

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks