General

  • Target

    f9a102ed9f9fda8aac00c698bd9b2dd301dedeb83da789a98fa8918eb7cfc3ae

  • Size

    378KB

  • Sample

    231006-qfa2rsbg7z

  • MD5

    5002c7124a4952dc6b76974e05d08f89

  • SHA1

    a5345a59d1139d953f0d4061004385190719efdf

  • SHA256

    f9a102ed9f9fda8aac00c698bd9b2dd301dedeb83da789a98fa8918eb7cfc3ae

  • SHA512

    aa70a05776f947f231cf9423602f0935ddd20a732cfd44e20b363a210319c4061a6db5a9a96398925c4779e80bd9ade293174f9e565f299f5a8ef0768e399a6c

  • SSDEEP

    6144:1XC/CH557yGY/fjBximSLB5aAOei9DQvC887hSd686HwNKqtNj:1XbHr7yV3OWz9WCf4L6HYDj

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      f9a102ed9f9fda8aac00c698bd9b2dd301dedeb83da789a98fa8918eb7cfc3ae

    • Size

      378KB

    • MD5

      5002c7124a4952dc6b76974e05d08f89

    • SHA1

      a5345a59d1139d953f0d4061004385190719efdf

    • SHA256

      f9a102ed9f9fda8aac00c698bd9b2dd301dedeb83da789a98fa8918eb7cfc3ae

    • SHA512

      aa70a05776f947f231cf9423602f0935ddd20a732cfd44e20b363a210319c4061a6db5a9a96398925c4779e80bd9ade293174f9e565f299f5a8ef0768e399a6c

    • SSDEEP

      6144:1XC/CH557yGY/fjBximSLB5aAOei9DQvC887hSd686HwNKqtNj:1XbHr7yV3OWz9WCf4L6HYDj

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks