Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1617e7a8eda2b696904531107eb3efd5c6be52d40d69e5ad173eb06cd7fecfc

  • Size

    378KB

  • Sample

    231006-xmyvqshe34

  • MD5

    e69c020febac575491a27488995a2cbf

  • SHA1

    ed0514e091ae1460940a2eea91968f3feba48910

  • SHA256

    c1617e7a8eda2b696904531107eb3efd5c6be52d40d69e5ad173eb06cd7fecfc

  • SHA512

    77fc1d2ba5af849a32504dfa795ac75e86ff07c9b6b4edaa5afeeddd2e8e63c296b2c546a67fbc8cb8828125a63bfbded1964f2c81b4a0ca4bc0a38f30086b61

  • SSDEEP

    6144:GhCmCH557yGY/fjBximSLB5aAODimxnt5Pitq+eDJYhkRFtNj:Gh0Hr7yV3OW0Wn/l+zkRpj

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      c1617e7a8eda2b696904531107eb3efd5c6be52d40d69e5ad173eb06cd7fecfc

    • Size

      378KB

    • MD5

      e69c020febac575491a27488995a2cbf

    • SHA1

      ed0514e091ae1460940a2eea91968f3feba48910

    • SHA256

      c1617e7a8eda2b696904531107eb3efd5c6be52d40d69e5ad173eb06cd7fecfc

    • SHA512

      77fc1d2ba5af849a32504dfa795ac75e86ff07c9b6b4edaa5afeeddd2e8e63c296b2c546a67fbc8cb8828125a63bfbded1964f2c81b4a0ca4bc0a38f30086b61

    • SSDEEP

      6144:GhCmCH557yGY/fjBximSLB5aAODimxnt5Pitq+eDJYhkRFtNj:Gh0Hr7yV3OW0Wn/l+zkRpj

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks