Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9067ac751510f83f7767b9cbac7c805d58d5d29bab73683832d6f36226dce3d2

  • Size

    700KB

  • Sample

    231012-f8tpgacc27

  • MD5

    265865b23c843a7176855fa5a64dcc36

  • SHA1

    b13a5e8d7045da867ab8640869afb8ef55810580

  • SHA256

    9067ac751510f83f7767b9cbac7c805d58d5d29bab73683832d6f36226dce3d2

  • SHA512

    50b948bc09719aeec7dff9b3b3bb1338816cf9eebba9dad7a72782e72f5613a3e8c7207c3861483fcac8f7186c86a2c663b95b2ee7436b5ebccfbae5676efe43

  • SSDEEP

    6144:u6vGALXgBEIy8wluzNcq/PVucQp7639A2285aEjZyugWWSYttRdvfr:PHXgFysVucQp7y9A2xZtUttfr

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      9067ac751510f83f7767b9cbac7c805d58d5d29bab73683832d6f36226dce3d2

    • Size

      700KB

    • MD5

      265865b23c843a7176855fa5a64dcc36

    • SHA1

      b13a5e8d7045da867ab8640869afb8ef55810580

    • SHA256

      9067ac751510f83f7767b9cbac7c805d58d5d29bab73683832d6f36226dce3d2

    • SHA512

      50b948bc09719aeec7dff9b3b3bb1338816cf9eebba9dad7a72782e72f5613a3e8c7207c3861483fcac8f7186c86a2c663b95b2ee7436b5ebccfbae5676efe43

    • SSDEEP

      6144:u6vGALXgBEIy8wluzNcq/PVucQp7639A2285aEjZyugWWSYttRdvfr:PHXgFysVucQp7y9A2xZtUttfr

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks