Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73ef1eb641eef7764d386032b6576ac92c2fcab8c790b801d8057e14e8618ec8

  • Size

    1.7MB

  • Sample

    231005-xseztaed8s

  • MD5

    c5fbbab507b6f3ae31406ab9f8e3b61e

  • SHA1

    6b99871f7a812ed6c806f53eaea9decf99c4a437

  • SHA256

    73ef1eb641eef7764d386032b6576ac92c2fcab8c790b801d8057e14e8618ec8

  • SHA512

    308fd36231ba656dbe779673f5a9652110fabeb760baeed6309561fbb7deffddf9c4c6f3ebe57b31672bf0244df69e75d6f36ff6d1e2e72e533b144f1de0d983

  • SSDEEP

    24576:tUxY5A0vimILMPcVZT6gH/A2Z46a9DhvhCw3+0wpef:t60vimILMP4l6SAO46a3vGIf

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      73ef1eb641eef7764d386032b6576ac92c2fcab8c790b801d8057e14e8618ec8

    • Size

      1.7MB

    • MD5

      c5fbbab507b6f3ae31406ab9f8e3b61e

    • SHA1

      6b99871f7a812ed6c806f53eaea9decf99c4a437

    • SHA256

      73ef1eb641eef7764d386032b6576ac92c2fcab8c790b801d8057e14e8618ec8

    • SHA512

      308fd36231ba656dbe779673f5a9652110fabeb760baeed6309561fbb7deffddf9c4c6f3ebe57b31672bf0244df69e75d6f36ff6d1e2e72e533b144f1de0d983

    • SSDEEP

      24576:tUxY5A0vimILMPcVZT6gH/A2Z46a9DhvhCw3+0wpef:t60vimILMP4l6SAO46a3vGIf

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks