General

  • Target

    04a3654c9732750a6f77f46cac04140cda0670ddae1d6714c757a7162e36b869

  • Size

    1.7MB

  • Sample

    231005-r1wpmsde73

  • MD5

    37920458c35e410cf895c51b03b778f5

  • SHA1

    dc56cc32e535ab62b0c0ffb714bd6ba2fc4dbd36

  • SHA256

    04a3654c9732750a6f77f46cac04140cda0670ddae1d6714c757a7162e36b869

  • SHA512

    8fc2a0b73c58d20532fdf6d78dd8b520d03f3008f3b86cf0298066ce459bbb12abb31c996093b1f5c145745f2e0f358a72ae8477514b59cd53cdff46c3b822f6

  • SSDEEP

    24576:WxY5gDVim9LMjNVX7qgHHY2oW6a9Dhvh6u5Ttg:YDVim9LMjbLqKY/W6a3vAyg

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      04a3654c9732750a6f77f46cac04140cda0670ddae1d6714c757a7162e36b869

    • Size

      1.7MB

    • MD5

      37920458c35e410cf895c51b03b778f5

    • SHA1

      dc56cc32e535ab62b0c0ffb714bd6ba2fc4dbd36

    • SHA256

      04a3654c9732750a6f77f46cac04140cda0670ddae1d6714c757a7162e36b869

    • SHA512

      8fc2a0b73c58d20532fdf6d78dd8b520d03f3008f3b86cf0298066ce459bbb12abb31c996093b1f5c145745f2e0f358a72ae8477514b59cd53cdff46c3b822f6

    • SSDEEP

      24576:WxY5gDVim9LMjNVX7qgHHY2oW6a9Dhvh6u5Ttg:YDVim9LMjbLqKY/W6a3vAyg

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks