General

  • Target

    6837951b139deace42b821db8fb9480d75131421606eadd4d82c6ff58f377115

  • Size

    1.7MB

  • Sample

    231005-w5q26sea3t

  • MD5

    214c63d11e0fa668d0a0b48b858aec6e

  • SHA1

    d683d02ed8ab3e60adf9c161b5d44e05b4646560

  • SHA256

    6837951b139deace42b821db8fb9480d75131421606eadd4d82c6ff58f377115

  • SHA512

    74cfb5b8ae53362cbf3b58ce97696710c6ac3d825522367bff59a4cd338fb39c643c05fbd204c437676df0cd101dc671f8a2fcc0c7b4485ac06291328a041682

  • SSDEEP

    24576:yAxY5A0vimILMPcVJT6gH/A2Z46a9DhvhdLdpXBxDkf:yG0vimILMP4V6SAO46a3vDgf

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      6837951b139deace42b821db8fb9480d75131421606eadd4d82c6ff58f377115

    • Size

      1.7MB

    • MD5

      214c63d11e0fa668d0a0b48b858aec6e

    • SHA1

      d683d02ed8ab3e60adf9c161b5d44e05b4646560

    • SHA256

      6837951b139deace42b821db8fb9480d75131421606eadd4d82c6ff58f377115

    • SHA512

      74cfb5b8ae53362cbf3b58ce97696710c6ac3d825522367bff59a4cd338fb39c643c05fbd204c437676df0cd101dc671f8a2fcc0c7b4485ac06291328a041682

    • SSDEEP

      24576:yAxY5A0vimILMPcVJT6gH/A2Z46a9DhvhdLdpXBxDkf:yG0vimILMP4V6SAO46a3vDgf

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks