General

  • Target

    8c8aef54bbab3a8fb5fc781c5dcf488503a064f21bea90027f883c0294bc56c0

  • Size

    378KB

  • Sample

    231006-r1gkqafb67

  • MD5

    44ca24b6f0b7577e55306a4d4bcc93ca

  • SHA1

    fb05c3522d6492a30d47b8ff69377557020f0c56

  • SHA256

    8c8aef54bbab3a8fb5fc781c5dcf488503a064f21bea90027f883c0294bc56c0

  • SHA512

    cc6efafc89114c6b2d2543a2ab6996899ca6477e4d34c944c1c686a15570bc59438f3fdbb36a1fd7d996e89e7bed64c76c87119ead9ae5903f52f64afba5e146

  • SSDEEP

    6144:z4+S692pCryG4kfjSGwEi56AOTGJkwqfVLALcxecPEHCwGJd92YKih0D:z4+T2wryNSEJkwqt4Sj8iwy7T8D

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      8c8aef54bbab3a8fb5fc781c5dcf488503a064f21bea90027f883c0294bc56c0

    • Size

      378KB

    • MD5

      44ca24b6f0b7577e55306a4d4bcc93ca

    • SHA1

      fb05c3522d6492a30d47b8ff69377557020f0c56

    • SHA256

      8c8aef54bbab3a8fb5fc781c5dcf488503a064f21bea90027f883c0294bc56c0

    • SHA512

      cc6efafc89114c6b2d2543a2ab6996899ca6477e4d34c944c1c686a15570bc59438f3fdbb36a1fd7d996e89e7bed64c76c87119ead9ae5903f52f64afba5e146

    • SSDEEP

      6144:z4+S692pCryG4kfjSGwEi56AOTGJkwqfVLALcxecPEHCwGJd92YKih0D:z4+T2wryNSEJkwqt4Sj8iwy7T8D

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks