General

  • Target

    0e35be5ec65e2fef6baac8275f5f2c047db8ba15098eb4a7ade378f559644e95

  • Size

    1.1MB

  • Sample

    231006-1v9hzsad64

  • MD5

    6dc22ad124b913a1cc012fd7f46cd4b9

  • SHA1

    b5f6036d767220260bb512418fcc044a4543c276

  • SHA256

    0e35be5ec65e2fef6baac8275f5f2c047db8ba15098eb4a7ade378f559644e95

  • SHA512

    4e24b01529238a5ff57ff01dedde8a12c69f0ac92c984db0ae2d7ea7eec054857b113b0b512fb591240e5c97ad88ffc68c15938487d17247643402ffeae2692b

  • SSDEEP

    24576:xyUL+EUVD/yT2wAR2+cxW83gfKgMpzvo:kUiEgD/D2+EW5FMp

Malware Config

Targets

    • Target

      0e35be5ec65e2fef6baac8275f5f2c047db8ba15098eb4a7ade378f559644e95

    • Size

      1.1MB

    • MD5

      6dc22ad124b913a1cc012fd7f46cd4b9

    • SHA1

      b5f6036d767220260bb512418fcc044a4543c276

    • SHA256

      0e35be5ec65e2fef6baac8275f5f2c047db8ba15098eb4a7ade378f559644e95

    • SHA512

      4e24b01529238a5ff57ff01dedde8a12c69f0ac92c984db0ae2d7ea7eec054857b113b0b512fb591240e5c97ad88ffc68c15938487d17247643402ffeae2692b

    • SSDEEP

      24576:xyUL+EUVD/yT2wAR2+cxW83gfKgMpzvo:kUiEgD/D2+EW5FMp

    • Detect Mystic stealer payload

    • Modifies Windows Defender Real-time Protection settings

    • Mystic

      Mystic is an infostealer written in C++.

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks