Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

  • Size

    1016KB

  • Sample

    231011-hrg1fsgd5s

  • MD5

    a8633acae1c192b00929eed57f24ed86

  • SHA1

    5c05004269ee5e44fad3076ab987a9c11b14b5b8

  • SHA256

    4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

  • SHA512

    09f76b3f6d1ae3bc71b1a6e491ea70326ac1a77326c5fa8f51ec38c82e3f40c5d605ccbf5550c5b47e35d35fbeb7399cb49be9b4f923875fdc1af2c4ed25a699

  • SSDEEP

    12288:z+WAo5YaBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyulvbG8VmNQVR/9:zxVYDKzcx9jkmPe/knxykG09

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

    • Size

      1016KB

    • MD5

      a8633acae1c192b00929eed57f24ed86

    • SHA1

      5c05004269ee5e44fad3076ab987a9c11b14b5b8

    • SHA256

      4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

    • SHA512

      09f76b3f6d1ae3bc71b1a6e491ea70326ac1a77326c5fa8f51ec38c82e3f40c5d605ccbf5550c5b47e35d35fbeb7399cb49be9b4f923875fdc1af2c4ed25a699

    • SSDEEP

      12288:z+WAo5YaBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyulvbG8VmNQVR/9:zxVYDKzcx9jkmPe/knxykG09

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks