General

  • Target

    ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b_JC.exe

  • Size

    1.7MB

  • Sample

    231005-xv9xzaee3z

  • MD5

    47e604c8c4b5d80e4f51d12153554ea7

  • SHA1

    96a1d57a91084947d8fe82d39efd1ecfa58c0b0e

  • SHA256

    ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b

  • SHA512

    c2594f818f8c96fbca6e549c45884b945b8c0397e198ee9e40105029dcb045039df510022462b41507a8a6795d598cda96cd3d3b2824c486067de9a860036445

  • SSDEEP

    24576:+/xY5A0vimILMPcVZT6gH/A2Z46a9Dhvht5Z/cf:+F0vimILMP4l6SAO46a3vbcf

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b_JC.exe

    • Size

      1.7MB

    • MD5

      47e604c8c4b5d80e4f51d12153554ea7

    • SHA1

      96a1d57a91084947d8fe82d39efd1ecfa58c0b0e

    • SHA256

      ed16df77dfe2ca81b73245b451c2f43f1220229215d955e7178c9580a659de6b

    • SHA512

      c2594f818f8c96fbca6e549c45884b945b8c0397e198ee9e40105029dcb045039df510022462b41507a8a6795d598cda96cd3d3b2824c486067de9a860036445

    • SSDEEP

      24576:+/xY5A0vimILMPcVZT6gH/A2Z46a9Dhvht5Z/cf:+F0vimILMP4l6SAO46a3vbcf

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks