General
-
Target
ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b_JC.exe
-
Size
1.7MB
-
Sample
231005-xv9xzaee3z
-
MD5
47e604c8c4b5d80e4f51d12153554ea7
-
SHA1
96a1d57a91084947d8fe82d39efd1ecfa58c0b0e
-
SHA256
ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b
-
SHA512
c2594f818f8c96fbca6e549c45884b945b8c0397e198ee9e40105029dcb045039df510022462b41507a8a6795d598cda96cd3d3b2824c486067de9a860036445
-
SSDEEP
24576:+/xY5A0vimILMPcVZT6gH/A2Z46a9Dhvht5Z/cf:+F0vimILMP4l6SAO46a3vbcf
Static task
static1
Behavioral task
behavioral1
Sample
ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
mystic
http://5.42.92.211/loghub/master
Targets
-
-
Target
ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b_JC.exe
-
Size
1.7MB
-
MD5
47e604c8c4b5d80e4f51d12153554ea7
-
SHA1
96a1d57a91084947d8fe82d39efd1ecfa58c0b0e
-
SHA256
ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b
-
SHA512
c2594f818f8c96fbca6e549c45884b945b8c0397e198ee9e40105029dcb045039df510022462b41507a8a6795d598cda96cd3d3b2824c486067de9a860036445
-
SSDEEP
24576:+/xY5A0vimILMPcVZT6gH/A2Z46a9Dhvht5Z/cf:+F0vimILMP4l6SAO46a3vbcf
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-