Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

b98bb205b6...f5.exe

windows7-x64

10

b98bb205b6...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

  • Size

    380KB

  • Sample

    231011-y2e7lscf92

  • MD5

    831f8e3ec36a98cef6c4115c66649628

  • SHA1

    e72c14e8a0fa67ee435378d5b45e6923d4445e0e

  • SHA256

    b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

  • SHA512

    6df068ed44e0d63bee309f456b4658b76a2c866a5cdc9f1e0e57f569441a7c5014495547798c7ef277b41012be2ca23b6ddec4d7bb244ed5faf0bde641b3417e

  • SSDEEP

    6144:qlPVhHX110KwTVSf3pOCq5b6uAOSTMiI/bedZ8dHzrd4BypS4cQqwm:qlPL3110dVaUcuMThI/ydWF4BonYwm

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

    • Size

      380KB

    • MD5

      831f8e3ec36a98cef6c4115c66649628

    • SHA1

      e72c14e8a0fa67ee435378d5b45e6923d4445e0e

    • SHA256

      b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

    • SHA512

      6df068ed44e0d63bee309f456b4658b76a2c866a5cdc9f1e0e57f569441a7c5014495547798c7ef277b41012be2ca23b6ddec4d7bb244ed5faf0bde641b3417e

    • SSDEEP

      6144:qlPVhHX110KwTVSf3pOCq5b6uAOSTMiI/bedZ8dHzrd4BypS4cQqwm:qlPL3110dVaUcuMThI/ydWF4BonYwm

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks