General

  • Target

    1c3561efebff589b6868b992a2e3fc3ae24e2578e7e2f290cb0c54e5da4e33d7

  • Size

    1.7MB

  • Sample

    231005-13ctzsfe91

  • MD5

    1819c5ac223156a090a6a3219d2066d5

  • SHA1

    8a3dce5b6ab47ea8c7dcfb8d89ed2cca2caed724

  • SHA256

    1c3561efebff589b6868b992a2e3fc3ae24e2578e7e2f290cb0c54e5da4e33d7

  • SHA512

    be51cf4d69eb31d4e694ce4d2c5fe8b71494943d66949d78794d45647140db6dea59e827a74b7935aba8f7a4614b453540010244ac189f2d18912bf1484e065e

  • SSDEEP

    24576:PdxY5A0vimILMPcVZT6gH/A2Z46a9DhvhUFXeNf:PX0vimILMP4l6SAO46a3vAONf

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      1c3561efebff589b6868b992a2e3fc3ae24e2578e7e2f290cb0c54e5da4e33d7

    • Size

      1.7MB

    • MD5

      1819c5ac223156a090a6a3219d2066d5

    • SHA1

      8a3dce5b6ab47ea8c7dcfb8d89ed2cca2caed724

    • SHA256

      1c3561efebff589b6868b992a2e3fc3ae24e2578e7e2f290cb0c54e5da4e33d7

    • SHA512

      be51cf4d69eb31d4e694ce4d2c5fe8b71494943d66949d78794d45647140db6dea59e827a74b7935aba8f7a4614b453540010244ac189f2d18912bf1484e065e

    • SSDEEP

      24576:PdxY5A0vimILMPcVZT6gH/A2Z46a9DhvhUFXeNf:PX0vimILMP4l6SAO46a3vAONf

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks