Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9cb3bbf64c415fa53b230e40d2ea5c8c8d8cbbb1778197f73eaf69a65a470d4b

  • Size

    1.7MB

  • Sample

    231005-qhywlsdb69

  • MD5

    660ca28aeca6a959eadf87bac8773718

  • SHA1

    30451dd72c66188fd352704253ae30807de269d8

  • SHA256

    9cb3bbf64c415fa53b230e40d2ea5c8c8d8cbbb1778197f73eaf69a65a470d4b

  • SHA512

    c44b28491e4370de22708d69c6849075ce31e24595006d91ed1b4437348247fe5aaecbca29f7d5884b73389737d019ed1f1657686de7472861712a687d05e318

  • SSDEEP

    24576:uKxY5A0vimILM/NVJ7qgHHY2Qm6a9Dhvhtj0vIVlxCf:u80vimILM/bdqKYHm6a3vPCIVKf

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      9cb3bbf64c415fa53b230e40d2ea5c8c8d8cbbb1778197f73eaf69a65a470d4b

    • Size

      1.7MB

    • MD5

      660ca28aeca6a959eadf87bac8773718

    • SHA1

      30451dd72c66188fd352704253ae30807de269d8

    • SHA256

      9cb3bbf64c415fa53b230e40d2ea5c8c8d8cbbb1778197f73eaf69a65a470d4b

    • SHA512

      c44b28491e4370de22708d69c6849075ce31e24595006d91ed1b4437348247fe5aaecbca29f7d5884b73389737d019ed1f1657686de7472861712a687d05e318

    • SSDEEP

      24576:uKxY5A0vimILM/NVJ7qgHHY2Qm6a9Dhvhtj0vIVlxCf:u80vimILM/bdqKYHm6a3vPCIVKf

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks