Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11zL5692.exe

  • Size

    276KB

  • Sample

    231113-lmtegacc98

  • MD5

    6388d171313b848164f405dc3f7f79cd

  • SHA1

    27eaddb12dea3065f72c2e6f146b24550cb3d986

  • SHA256

    627bdf7a9650d45175723c9dd313ce63df6be286018d4e3f746c6ee42bad7e45

  • SHA512

    6961e784720875763ec57c8d75cf57f9cc35a6f2a7ce64873c2546ea63a9197f4c1aac4e7cf68af5b0e4e2193c27a56109885741cba60a90b1c2b1aef8c92375

  • SSDEEP

    6144:2KWeIhzyZNGuHPqKLQGD5N15kBL28+5lJSenN+UKH:2KWewyh7LFpkxNGvK

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11zL5692.exe

    • Size

      276KB

    • MD5

      6388d171313b848164f405dc3f7f79cd

    • SHA1

      27eaddb12dea3065f72c2e6f146b24550cb3d986

    • SHA256

      627bdf7a9650d45175723c9dd313ce63df6be286018d4e3f746c6ee42bad7e45

    • SHA512

      6961e784720875763ec57c8d75cf57f9cc35a6f2a7ce64873c2546ea63a9197f4c1aac4e7cf68af5b0e4e2193c27a56109885741cba60a90b1c2b1aef8c92375

    • SSDEEP

      6144:2KWeIhzyZNGuHPqKLQGD5N15kBL28+5lJSenN+UKH:2KWewyh7LFpkxNGvK

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks