General

  • Target

    d3b0facbf709bbf6a2cb1026e17768c620b56f7900afb777dc65fc3d9808cdff

  • Size

    378KB

  • Sample

    231006-qztcfseb72

  • MD5

    174dfe84647cd9159166148edd7b2fbe

  • SHA1

    e487a260e0bbf77af32273cf739719c979048cc4

  • SHA256

    d3b0facbf709bbf6a2cb1026e17768c620b56f7900afb777dc65fc3d9808cdff

  • SHA512

    3b2932ceeaee3d69806eb0992aabc14ef11e7f75c8a7a05cbd4e0cc0b2e13836bc445c9a0bb218d9a24bf90413daa79905e2a78133a4524f88f2460bd72f66cb

  • SSDEEP

    6144:Z4PDS092pCryG4kfjSGwEi56AORGk4tfH8Mi0WwWu1Y7oyPRv0D:Z4LR2wryNSq/tP4gTKMD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      d3b0facbf709bbf6a2cb1026e17768c620b56f7900afb777dc65fc3d9808cdff

    • Size

      378KB

    • MD5

      174dfe84647cd9159166148edd7b2fbe

    • SHA1

      e487a260e0bbf77af32273cf739719c979048cc4

    • SHA256

      d3b0facbf709bbf6a2cb1026e17768c620b56f7900afb777dc65fc3d9808cdff

    • SHA512

      3b2932ceeaee3d69806eb0992aabc14ef11e7f75c8a7a05cbd4e0cc0b2e13836bc445c9a0bb218d9a24bf90413daa79905e2a78133a4524f88f2460bd72f66cb

    • SSDEEP

      6144:Z4PDS092pCryG4kfjSGwEi56AORGk4tfH8Mi0WwWu1Y7oyPRv0D:Z4LR2wryNSq/tP4gTKMD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks