Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

eaf619dd91...c3.exe

windows7-x64

10

eaf619dd91...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf619dd91b9e35cf1c4b72e4a2e83433ca887cbe9978f5da0f0dd47cfa731c3

  • Size

    700KB

  • Sample

    231012-felf1ahh45

  • MD5

    d02b17eb49530ae5d5c0382033d4e7fc

  • SHA1

    3f4e8983c9aa9b94f6cb36d2cc4ac4037a61d0eb

  • SHA256

    eaf619dd91b9e35cf1c4b72e4a2e83433ca887cbe9978f5da0f0dd47cfa731c3

  • SHA512

    6ffdcab58dc049b20fd6949000696409cf67054baa92428ed763992b0bf64505a029fb986b96141c448cca71e3507b36f27cc8d09f31c69631c49a5946fae04a

  • SSDEEP

    6144:P6vGALXgBEIy8wluzNcq/PVucQpsc5F6hFkHQQYvmhYG0FWGrKvfr:iHXgFysVucQpsmFJzYG0For

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      eaf619dd91b9e35cf1c4b72e4a2e83433ca887cbe9978f5da0f0dd47cfa731c3

    • Size

      700KB

    • MD5

      d02b17eb49530ae5d5c0382033d4e7fc

    • SHA1

      3f4e8983c9aa9b94f6cb36d2cc4ac4037a61d0eb

    • SHA256

      eaf619dd91b9e35cf1c4b72e4a2e83433ca887cbe9978f5da0f0dd47cfa731c3

    • SHA512

      6ffdcab58dc049b20fd6949000696409cf67054baa92428ed763992b0bf64505a029fb986b96141c448cca71e3507b36f27cc8d09f31c69631c49a5946fae04a

    • SSDEEP

      6144:P6vGALXgBEIy8wluzNcq/PVucQpsc5F6hFkHQQYvmhYG0FWGrKvfr:iHXgFysVucQpsmFJzYG0For

    Score
    10/10
    mysticstealer

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks