mystic | 3366934fd27fb24f71b0785f360d15c44ce18225d69e0b944d2a743b247b862d | Triage

Sharing

General

Target

3366934fd27fb24f71b0785f360d15c44ce18225d69e0b944d2a743b247b862d
Size

1.7MB
Sample

231004-zt8pmafa91
MD5

5beb0c5583fad02dc696e61d91071dc2
SHA1

070ae8f1ea96076208b7cb635fb3d9964c849b30
SHA256

3366934fd27fb24f71b0785f360d15c44ce18225d69e0b944d2a743b247b862d
SHA512

42caa0d748fba450926602481e2d473fcf45f2f35c354d0e3792212fe021c94619f08fcddd39bb0a1f457968da727df06217784ea30d220d13b975b31f9e1474
SSDEEP

49152:VAlzXjrB6QMyMnTWtjIPErIHW2TCacIGQh:ylzTrwkMTWtgmjQ

Score

10^/10

mystic evasion persistence stealer trojan

Malware Config

Targets

- Target
  
  3366934fd27fb24f71b0785f360d15c44ce18225d69e0b944d2a743b247b862d
- Size
  
  1.7MB
- MD5
  
  5beb0c5583fad02dc696e61d91071dc2
- SHA1
  
  070ae8f1ea96076208b7cb635fb3d9964c849b30
- SHA256
  
  3366934fd27fb24f71b0785f360d15c44ce18225d69e0b944d2a743b247b862d
- SHA512
  
  42caa0d748fba450926602481e2d473fcf45f2f35c354d0e3792212fe021c94619f08fcddd39bb0a1f457968da727df06217784ea30d220d13b975b31f9e1474
- SSDEEP
  
  49152:VAlzXjrB6QMyMnTWtjIPErIHW2TCacIGQh:ylzTrwkMTWtgmjQ
Score

10^/10

mystic evasion persistence stealer trojan
- Detect Mystic stealer payload
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Mystic
  Mystic is an infostealer written in C++.
  stealer mystic
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mysticevasionpersistencestealertrojan