Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b33b10d15ed4a92e395b7293e0ebb08b42df53dc64ba600b5aa68a3bca55225c

  • Size

    364KB

  • Sample

    231012-abt13seg66

  • MD5

    65f893242b3e428f206d79340d1aa335

  • SHA1

    8c0f7a7ef3ad6cf306d8afce0fd33578eebcab94

  • SHA256

    b33b10d15ed4a92e395b7293e0ebb08b42df53dc64ba600b5aa68a3bca55225c

  • SHA512

    405b5582da8a0d67c6a841a595f09f0052868bff3b81c15a99a9675ce48f57e3be1ef2d229442764a2ad215361c97fda648692932fccf1532f1bd7e8feff26b2

  • SSDEEP

    6144:5N46fuYXChoQTjlFgLuCY1dRuAOZgxnJ1tPIIHMAJVw8y0:5aYzXChdTbv1buSPI6jw8y

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      b33b10d15ed4a92e395b7293e0ebb08b42df53dc64ba600b5aa68a3bca55225c

    • Size

      364KB

    • MD5

      65f893242b3e428f206d79340d1aa335

    • SHA1

      8c0f7a7ef3ad6cf306d8afce0fd33578eebcab94

    • SHA256

      b33b10d15ed4a92e395b7293e0ebb08b42df53dc64ba600b5aa68a3bca55225c

    • SHA512

      405b5582da8a0d67c6a841a595f09f0052868bff3b81c15a99a9675ce48f57e3be1ef2d229442764a2ad215361c97fda648692932fccf1532f1bd7e8feff26b2

    • SSDEEP

      6144:5N46fuYXChoQTjlFgLuCY1dRuAOZgxnJ1tPIIHMAJVw8y0:5aYzXChdTbv1buSPI6jw8y

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks