Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50752d9554ac00d0d4a8110b0834e487246fbea9c01daa0e9247e2a9538ded1b

  • Size

    252KB

  • Sample

    231005-s4xlsaea62

  • MD5

    b5b7040dc1e20e580e5d38248fd36ce5

  • SHA1

    864cf62d8d86fe233c81c5866edc1f582f484fa7

  • SHA256

    50752d9554ac00d0d4a8110b0834e487246fbea9c01daa0e9247e2a9538ded1b

  • SHA512

    f3ed169aba17abb04a45a50572ab75c77e624d1107c2574259f14b95885e995121c46937889f7fcbdc5e9283aca47e626ba589199f57fbc81c8bf00b9ca69bfa

  • SSDEEP

    3072:8al458f0CoAGICBAPuvDFaAjvkJXGqOHM73JHyWFigmeixYAfexLQZB2nGb/1H5B:k5lCxWfr+Gq0i9UgU2A6cv2nyf0

Score
10/10
mysticstealer

Malware Config

Targets

    • Target

      50752d9554ac00d0d4a8110b0834e487246fbea9c01daa0e9247e2a9538ded1b

    • Size

      252KB

    • MD5

      b5b7040dc1e20e580e5d38248fd36ce5

    • SHA1

      864cf62d8d86fe233c81c5866edc1f582f484fa7

    • SHA256

      50752d9554ac00d0d4a8110b0834e487246fbea9c01daa0e9247e2a9538ded1b

    • SHA512

      f3ed169aba17abb04a45a50572ab75c77e624d1107c2574259f14b95885e995121c46937889f7fcbdc5e9283aca47e626ba589199f57fbc81c8bf00b9ca69bfa

    • SSDEEP

      3072:8al458f0CoAGICBAPuvDFaAjvkJXGqOHM73JHyWFigmeixYAfexLQZB2nGb/1H5B:k5lCxWfr+Gq0i9UgU2A6cv2nyf0

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks