General

  • Target

    6b35aaaf2d117f00300837256cadb951f8fcd77a209af360521271f9232728ae

  • Size

    1.7MB

  • Sample

    231005-zvdwmshd23

  • MD5

    6dc9f9e2c0e042e57f7ef8affecbb705

  • SHA1

    10bb20650725852bfa154c1843d0f11353ed3d0e

  • SHA256

    6b35aaaf2d117f00300837256cadb951f8fcd77a209af360521271f9232728ae

  • SHA512

    ce1e2963dae5537955fabe03e0ade0cdd61e4fcab311ccf6fc38fc8e5a2812ae6eea92f015362baba4d58b41ff061b717f1253dc7b867c66d793f1783a0be1ce

  • SSDEEP

    24576:ItxY5A0vimILM/NVJ7qgHHY2Qm6a9DhvhMaW8f:IH0vimILM/bdqKYHm6a3vn5f

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      6b35aaaf2d117f00300837256cadb951f8fcd77a209af360521271f9232728ae

    • Size

      1.7MB

    • MD5

      6dc9f9e2c0e042e57f7ef8affecbb705

    • SHA1

      10bb20650725852bfa154c1843d0f11353ed3d0e

    • SHA256

      6b35aaaf2d117f00300837256cadb951f8fcd77a209af360521271f9232728ae

    • SHA512

      ce1e2963dae5537955fabe03e0ade0cdd61e4fcab311ccf6fc38fc8e5a2812ae6eea92f015362baba4d58b41ff061b717f1253dc7b867c66d793f1783a0be1ce

    • SSDEEP

      24576:ItxY5A0vimILM/NVJ7qgHHY2Qm6a9DhvhMaW8f:IH0vimILM/bdqKYHm6a3vn5f

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks