Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dn1KX41.exe
-
Size
656KB
-
Sample
231113-lny2cacd28
-
MD5
ae2fcc9afa798f5851a14df6f138adac
-
SHA1
2404c54d8f6d5fbe66a1cb1c29a0438272b0274d
-
SHA256
86a9f6f8eb39d76e76683985299baf63df0b218a5bf51b5e8bf51f94b0f84bde
-
SHA512
17078490514de733b69f294b33229219a488fbf8bd86305695692a26526c9a35bc04023c57d865802316e07fda104e14d6e6169beb44bbea830c05f38f4122bf
-
SSDEEP
12288:aMr+y90x0NA0H7Gae/4IC50pCCHGN0PLvYMXiYQbDL6jB8X0r+aX9:AyKiaaewIsgCQGIgYDv8X0rJ9
Static task
static1
Behavioral task
behavioral1
Sample
dn1KX41.exe
Resource
win7-20231020-en
Malware Config
Targets
-
-
Target
dn1KX41.exe
-
Size
656KB
-
MD5
ae2fcc9afa798f5851a14df6f138adac
-
SHA1
2404c54d8f6d5fbe66a1cb1c29a0438272b0274d
-
SHA256
86a9f6f8eb39d76e76683985299baf63df0b218a5bf51b5e8bf51f94b0f84bde
-
SHA512
17078490514de733b69f294b33229219a488fbf8bd86305695692a26526c9a35bc04023c57d865802316e07fda104e14d6e6169beb44bbea830c05f38f4122bf
-
SSDEEP
12288:aMr+y90x0NA0H7Gae/4IC50pCCHGN0PLvYMXiYQbDL6jB8X0r+aX9:AyKiaaewIsgCQGIgYDv8X0rJ9
-
Detect Mystic stealer payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-