Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.Trojan.Inject4.61510.19284.29774.exe

  • Size

    356KB

  • Sample

    231010-2a4bxafd2v

  • MD5

    2ae04669e3ca0338f02653445e52fd15

  • SHA1

    c3d75770dff1b03d35ec7bfa5f57b325c2f7666e

  • SHA256

    bf3123f9b064cd14e3c265e97f5f120acc400731e75e04b44b5a3ca508017b5c

  • SHA512

    cc4f3269684a3ddca15c2d04be38f0d1dc276299bdebd00ffc0b0b99b94f521683296dbd4a3fbb6a072077c4a37d9d2767d13d22636d63340af7f3a0109807e4

  • SSDEEP

    6144:tgTeW/s5GqrO5aXnfEGIXWPvZAONy9GHkcDa3t+aiJHV+uL3qswVs0BC+:XmcGqrOk86xu4kcDwt+a2HV+uLaLs0Bl

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      SecuriteInfo.com.Trojan.Inject4.61510.19284.29774.exe

    • Size

      356KB

    • MD5

      2ae04669e3ca0338f02653445e52fd15

    • SHA1

      c3d75770dff1b03d35ec7bfa5f57b325c2f7666e

    • SHA256

      bf3123f9b064cd14e3c265e97f5f120acc400731e75e04b44b5a3ca508017b5c

    • SHA512

      cc4f3269684a3ddca15c2d04be38f0d1dc276299bdebd00ffc0b0b99b94f521683296dbd4a3fbb6a072077c4a37d9d2767d13d22636d63340af7f3a0109807e4

    • SSDEEP

      6144:tgTeW/s5GqrO5aXnfEGIXWPvZAONy9GHkcDa3t+aiJHV+uL3qswVs0BC+:XmcGqrOk86xu4kcDwt+a2HV+uLaLs0Bl

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks