Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

2a2dbd71fa...82.exe

windows7-x64

5

2a2dbd71fa...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a2dbd71fae9cff300cb5ed2a2f8896bb62ce5f1b43e7be87946dfe4aecbd582

  • Size

    700KB

  • Sample

    231012-gxamwsdg69

  • MD5

    f976b4f177f79502215c7d2d9e93ee16

  • SHA1

    97f888337aae22e27eed57deb4b85cdff13c576a

  • SHA256

    2a2dbd71fae9cff300cb5ed2a2f8896bb62ce5f1b43e7be87946dfe4aecbd582

  • SHA512

    e41bcc684fcf5651f0812beb4d97fae71122dc5468c185e250071d2c69f8b3c5d2237a052b90fa3cb674c4d956c5caa17190aa28f8c07c02c97ad17b6bb6754a

  • SSDEEP

    6144:9SvGAafgBMniUwluzlcy/XVucQ5p6SLGn+xfhXr3uwlLycLRLy9vfz:4Gfg2i8VucQ5p60V3usLBcNz

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      2a2dbd71fae9cff300cb5ed2a2f8896bb62ce5f1b43e7be87946dfe4aecbd582

    • Size

      700KB

    • MD5

      f976b4f177f79502215c7d2d9e93ee16

    • SHA1

      97f888337aae22e27eed57deb4b85cdff13c576a

    • SHA256

      2a2dbd71fae9cff300cb5ed2a2f8896bb62ce5f1b43e7be87946dfe4aecbd582

    • SHA512

      e41bcc684fcf5651f0812beb4d97fae71122dc5468c185e250071d2c69f8b3c5d2237a052b90fa3cb674c4d956c5caa17190aa28f8c07c02c97ad17b6bb6754a

    • SSDEEP

      6144:9SvGAafgBMniUwluzlcy/XVucQ5p6SLGn+xfhXr3uwlLycLRLy9vfz:4Gfg2i8VucQ5p60V3usLBcNz

    Score
    10/10
    mysticstealer

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks