Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    90d540d07d0831a8bbf93e8340fbcf52f6338167771a314e462ed8c59b6ae121

  • Size

    396KB

  • Sample

    231011-1r1fxaeg7z

  • MD5

    dbf5edf93c88dc0a7bc356717d1e898e

  • SHA1

    197ddf93e3b1babab84977a8cda9a235ceb76482

  • SHA256

    90d540d07d0831a8bbf93e8340fbcf52f6338167771a314e462ed8c59b6ae121

  • SHA512

    1407ddf17e277656d8f534746d9804e97d5aedd9fc98ebc37cf244156cdec8656675bd109d9645c0ca7cb109ab7ef500f6e3c3a09de67747685983f7b5725430

  • SSDEEP

    6144:3NahUOqW5XJ6EDOpvOCm5MNuAOWXbTcLTOm6NptKsMMg4BQXNynsOqwh:3NkdqW5sEe2uuYLT2TD/sBQXNyn4wh

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      90d540d07d0831a8bbf93e8340fbcf52f6338167771a314e462ed8c59b6ae121

    • Size

      396KB

    • MD5

      dbf5edf93c88dc0a7bc356717d1e898e

    • SHA1

      197ddf93e3b1babab84977a8cda9a235ceb76482

    • SHA256

      90d540d07d0831a8bbf93e8340fbcf52f6338167771a314e462ed8c59b6ae121

    • SHA512

      1407ddf17e277656d8f534746d9804e97d5aedd9fc98ebc37cf244156cdec8656675bd109d9645c0ca7cb109ab7ef500f6e3c3a09de67747685983f7b5725430

    • SSDEEP

      6144:3NahUOqW5XJ6EDOpvOCm5MNuAOWXbTcLTOm6NptKsMMg4BQXNynsOqwh:3NkdqW5sEe2uuYLT2TD/sBQXNyn4wh

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks