General

  • Target

    de5ea419245ae984df135a6bbd2bd683df6e8208b0a59bf4e0f93844515737ad

  • Size

    378KB

  • Sample

    231006-2c2wvsae47

  • MD5

    7e5c3263122f49fe7d86d0354aa8d1ee

  • SHA1

    6c9120d27324ea97951f783e831b0c49c2df677c

  • SHA256

    de5ea419245ae984df135a6bbd2bd683df6e8208b0a59bf4e0f93844515737ad

  • SHA512

    c60e0e2b24a616df653ec8e90bfaafe462c1cf42e66f4f4cf1ee2a34aea3f8d3f2de840d2ae359a558d25be9b1c8ddbbbfc0e93fe4da425e6129bc4ef56cdbc4

  • SSDEEP

    6144:74WSX92pCryG4kfjSGwEi56AOnGK/Ew0HtM0TGNnBVrjkIepCB8/+87VlXM0D:74W42wryNSo4EwUpP/rhD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      de5ea419245ae984df135a6bbd2bd683df6e8208b0a59bf4e0f93844515737ad

    • Size

      378KB

    • MD5

      7e5c3263122f49fe7d86d0354aa8d1ee

    • SHA1

      6c9120d27324ea97951f783e831b0c49c2df677c

    • SHA256

      de5ea419245ae984df135a6bbd2bd683df6e8208b0a59bf4e0f93844515737ad

    • SHA512

      c60e0e2b24a616df653ec8e90bfaafe462c1cf42e66f4f4cf1ee2a34aea3f8d3f2de840d2ae359a558d25be9b1c8ddbbbfc0e93fe4da425e6129bc4ef56cdbc4

    • SSDEEP

      6144:74WSX92pCryG4kfjSGwEi56AOnGK/Ew0HtM0TGNnBVrjkIepCB8/+87VlXM0D:74W42wryNSo4EwUpP/rhD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks