General

  • Target

    28682b28680d4aca937081f79e939f7a14cdb18ba033c52f4c8f0f63ee0db9cb

  • Size

    1.7MB

  • Sample

    231005-2jb9saff71

  • MD5

    501bd8c4a18e386f240b6d77d388cbb3

  • SHA1

    139abbb0b50364a4cb1cb3a702f0456c184eb1fa

  • SHA256

    28682b28680d4aca937081f79e939f7a14cdb18ba033c52f4c8f0f63ee0db9cb

  • SHA512

    5e10e5bf6db62ae1893e9a5e2c32970fa289da2537cb34ebe0db458bd1278c6ca6e846660c76a3fb19b45f5015829056a05bcacfb0e9df96044f9251090412d0

  • SSDEEP

    24576:XFxY5A0vimILMPcVZT6gH/A2Z46a9DhvhTTwFSMHTf:XP0vimILMP4l6SAO46a3v9wYMHTf

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      28682b28680d4aca937081f79e939f7a14cdb18ba033c52f4c8f0f63ee0db9cb

    • Size

      1.7MB

    • MD5

      501bd8c4a18e386f240b6d77d388cbb3

    • SHA1

      139abbb0b50364a4cb1cb3a702f0456c184eb1fa

    • SHA256

      28682b28680d4aca937081f79e939f7a14cdb18ba033c52f4c8f0f63ee0db9cb

    • SHA512

      5e10e5bf6db62ae1893e9a5e2c32970fa289da2537cb34ebe0db458bd1278c6ca6e846660c76a3fb19b45f5015829056a05bcacfb0e9df96044f9251090412d0

    • SSDEEP

      24576:XFxY5A0vimILMPcVZT6gH/A2Z46a9DhvhTTwFSMHTf:XP0vimILMP4l6SAO46a3v9wYMHTf

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks