Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    759d23760669d22e7948296c9ede99813d5026b36ec8c2f77d00444a1dddc486

  • Size

    1.6MB

  • Sample

    231007-ye478aeh91

  • MD5

    91f35215afd36231ea8df896ad364ea7

  • SHA1

    22d64dad308d21036573d26e345bd4b7dd8baa45

  • SHA256

    759d23760669d22e7948296c9ede99813d5026b36ec8c2f77d00444a1dddc486

  • SHA512

    e82846fee08991080d0c3150521726e0a823eac9603aec698525ef26c98b0bf38fe37f365ca3ff00259c87d56b74d8e4086b295a887743294a9f74e701e52e8e

  • SSDEEP

    24576:nyG0iaGESwwy4OMn2QNqSfg9/oQoe8RS8xMK2a34UMnIDlJUhtMN:yGfdEnwy4O6Nqb9/foeqS8CNUMneW

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      759d23760669d22e7948296c9ede99813d5026b36ec8c2f77d00444a1dddc486

    • Size

      1.6MB

    • MD5

      91f35215afd36231ea8df896ad364ea7

    • SHA1

      22d64dad308d21036573d26e345bd4b7dd8baa45

    • SHA256

      759d23760669d22e7948296c9ede99813d5026b36ec8c2f77d00444a1dddc486

    • SHA512

      e82846fee08991080d0c3150521726e0a823eac9603aec698525ef26c98b0bf38fe37f365ca3ff00259c87d56b74d8e4086b295a887743294a9f74e701e52e8e

    • SSDEEP

      24576:nyG0iaGESwwy4OMn2QNqSfg9/oQoe8RS8xMK2a34UMnIDlJUhtMN:yGfdEnwy4O6Nqb9/foeqS8CNUMneW

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks