Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    x6526259.exe

  • Size

    826KB

  • Sample

    231004-hxykdshg61

  • MD5

    6d368034064f4aec421b17f47f6ab9f6

  • SHA1

    c5cecdd9aae0ae1ef4150e41f6667a79d31cc98d

  • SHA256

    c893a0de68f5da325b89b7fd9217c61cee835fe27b7d9aec72e49c7c2feec88d

  • SHA512

    0abf44ae84e4d790996ae0e13197043854bf33e6eb75e566e23784d85ea024bb5c9fe667b5c74ddb804a05bbbb1dc280a9ce89d2b0cda50d6adf0ac27e9b3d8b

  • SSDEEP

    12288:NMrSy90PnND4XNbYsAoiBp7vRlEaVxTjPb/9UkPIxnsx4S7HZ+Xg5Eq8yn8U1n+F:zyInNmQR5lZvr4npMHwg5E5G1n+F

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      x6526259.exe

    • Size

      826KB

    • MD5

      6d368034064f4aec421b17f47f6ab9f6

    • SHA1

      c5cecdd9aae0ae1ef4150e41f6667a79d31cc98d

    • SHA256

      c893a0de68f5da325b89b7fd9217c61cee835fe27b7d9aec72e49c7c2feec88d

    • SHA512

      0abf44ae84e4d790996ae0e13197043854bf33e6eb75e566e23784d85ea024bb5c9fe667b5c74ddb804a05bbbb1dc280a9ce89d2b0cda50d6adf0ac27e9b3d8b

    • SSDEEP

      12288:NMrSy90PnND4XNbYsAoiBp7vRlEaVxTjPb/9UkPIxnsx4S7HZ+Xg5Eq8yn8U1n+F:zyInNmQR5lZvr4npMHwg5E5G1n+F

    Score
    10/10
    mysticpersistencestealer

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks