General

  • Target

    e283b432b4062b3e4aac7bddfd61180488f8343c7d54fa91cee38a204a803f4d_JC.exe

  • Size

    1.7MB

  • Sample

    231005-xrf6gsed6t

  • MD5

    5586eda00d71e2dbe2a033d34cd38fb1

  • SHA1

    b6635a7612f02ddfd6cde13022b413b199c818bd

  • SHA256

    e283b432b4062b3e4aac7bddfd61180488f8343c7d54fa91cee38a204a803f4d

  • SHA512

    a83d4f02656cb289e1e03caedbaf96372fc8f8ebb8b98145a1a9108585dd46974cd010fa2638595c939596309cdc3b00fc04060f9bc653c8304f6127b18eb6be

  • SSDEEP

    24576:iUxY5A0vimILMPcVJT6gH/A2Z46a9DhvhmP/PNXRFyixJSf:i60vimILMP4V6SAO46a3vK/FR8ixJSf

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      e283b432b4062b3e4aac7bddfd61180488f8343c7d54fa91cee38a204a803f4d_JC.exe

    • Size

      1.7MB

    • MD5

      5586eda00d71e2dbe2a033d34cd38fb1

    • SHA1

      b6635a7612f02ddfd6cde13022b413b199c818bd

    • SHA256

      e283b432b4062b3e4aac7bddfd61180488f8343c7d54fa91cee38a204a803f4d

    • SHA512

      a83d4f02656cb289e1e03caedbaf96372fc8f8ebb8b98145a1a9108585dd46974cd010fa2638595c939596309cdc3b00fc04060f9bc653c8304f6127b18eb6be

    • SSDEEP

      24576:iUxY5A0vimILMPcVJT6gH/A2Z46a9DhvhmP/PNXRFyixJSf:i60vimILMP4V6SAO46a3vK/FR8ixJSf

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks