Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

NEAS.0bed3...JC.exe

windows7-x64

10

NEAS.0bed3...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0bed3125d17d1e4ef0594d3558d33233cf1cfc95f8f0a0a6b9f205856be9708e_JC.exe

  • Size

    378KB

  • Sample

    231006-y89pssfg3s

  • MD5

    31dd05be6327b99d57887dae243be7de

  • SHA1

    c10bea15badb026222d609402100a4320cb25e10

  • SHA256

    0bed3125d17d1e4ef0594d3558d33233cf1cfc95f8f0a0a6b9f205856be9708e

  • SHA512

    6efb98283d6393894cb12e46fc3c553f8fb52e9270b749e8e4a162d2fa5ddf8e6346b33b069554353dd4603bf947ccc56672dd54a5e2bc08cf36b512c7e1003e

  • SSDEEP

    6144:A4LSp92pCryG4kfjSGwEi56AOOGF7L0R0rFhc+VbiKH7KB0D:A4Lm2wryNSvx0R0JK+VbiKH7KqD

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      NEAS.0bed3125d17d1e4ef0594d3558d33233cf1cfc95f8f0a0a6b9f205856be9708e_JC.exe

    • Size

      378KB

    • MD5

      31dd05be6327b99d57887dae243be7de

    • SHA1

      c10bea15badb026222d609402100a4320cb25e10

    • SHA256

      0bed3125d17d1e4ef0594d3558d33233cf1cfc95f8f0a0a6b9f205856be9708e

    • SHA512

      6efb98283d6393894cb12e46fc3c553f8fb52e9270b749e8e4a162d2fa5ddf8e6346b33b069554353dd4603bf947ccc56672dd54a5e2bc08cf36b512c7e1003e

    • SSDEEP

      6144:A4LSp92pCryG4kfjSGwEi56AOOGF7L0R0rFhc+VbiKH7KB0D:A4Lm2wryNSvx0R0JK+VbiKH7KqD

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks