Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

4153d2b1cb...36.exe

windows7-x64

10

4153d2b1cb...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

  • Size

    1016KB

  • Sample

    231011-hrg1fsgd5s

  • MD5

    a8633acae1c192b00929eed57f24ed86

  • SHA1

    5c05004269ee5e44fad3076ab987a9c11b14b5b8

  • SHA256

    4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

  • SHA512

    09f76b3f6d1ae3bc71b1a6e491ea70326ac1a77326c5fa8f51ec38c82e3f40c5d605ccbf5550c5b47e35d35fbeb7399cb49be9b4f923875fdc1af2c4ed25a699

  • SSDEEP

    12288:z+WAo5YaBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyulvbG8VmNQVR/9:zxVYDKzcx9jkmPe/knxykG09

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

    • Size

      1016KB

    • MD5

      a8633acae1c192b00929eed57f24ed86

    • SHA1

      5c05004269ee5e44fad3076ab987a9c11b14b5b8

    • SHA256

      4153d2b1cb476033ed0382be3027083b5f91fcd4eee4c831b6d31f1d86a02b36

    • SHA512

      09f76b3f6d1ae3bc71b1a6e491ea70326ac1a77326c5fa8f51ec38c82e3f40c5d605ccbf5550c5b47e35d35fbeb7399cb49be9b4f923875fdc1af2c4ed25a699

    • SSDEEP

      12288:z+WAo5YaBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyulvbG8VmNQVR/9:zxVYDKzcx9jkmPe/knxykG09

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks