General

  • Target

    ed68669f0d4d498107498ac8d5a344407d66d3a7f5538fb5040c7d13b270f4b9

  • Size

    378KB

  • Sample

    231006-m7deesch96

  • MD5

    aa1201ab011f674a1aa3421066bc016f

  • SHA1

    03caeb6c6b6effcbc0beb74ce5659a740b9021e3

  • SHA256

    ed68669f0d4d498107498ac8d5a344407d66d3a7f5538fb5040c7d13b270f4b9

  • SHA512

    005f111b6715c9ba8efed9699ef57ae072c1ac72aed6a043e5881433802a4306d7e6db7ee31a9df4b1cc0d19a654aab0ebccd4812b62c4dd59a825100c1c2214

  • SSDEEP

    6144:H4eSH92pCryG4kfjSGwEi56AO7G9dOGK0J0IaPfA8H5pH0D:H4eA2wryNSQnOGfiCD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      ed68669f0d4d498107498ac8d5a344407d66d3a7f5538fb5040c7d13b270f4b9

    • Size

      378KB

    • MD5

      aa1201ab011f674a1aa3421066bc016f

    • SHA1

      03caeb6c6b6effcbc0beb74ce5659a740b9021e3

    • SHA256

      ed68669f0d4d498107498ac8d5a344407d66d3a7f5538fb5040c7d13b270f4b9

    • SHA512

      005f111b6715c9ba8efed9699ef57ae072c1ac72aed6a043e5881433802a4306d7e6db7ee31a9df4b1cc0d19a654aab0ebccd4812b62c4dd59a825100c1c2214

    • SSDEEP

      6144:H4eSH92pCryG4kfjSGwEi56AO7G9dOGK0J0IaPfA8H5pH0D:H4eA2wryNSQnOGfiCD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks