General

  • Target

    6939d6bc51dfa5679e0925446099f8e092c7c6b104d99b6d6788e5e6a00ed35d

  • Size

    378KB

  • Sample

    231006-r718psdc61

  • MD5

    68eb069a3c73bc55fa7db250df1a5da5

  • SHA1

    410f4364285724b19efd19950081f4af93b66ccc

  • SHA256

    6939d6bc51dfa5679e0925446099f8e092c7c6b104d99b6d6788e5e6a00ed35d

  • SHA512

    b114eea79f6063829ac723a49ebe14d10d1c2477d7d1c9a95bdbe8e5a50b721938896fc07ee39da6d56a4094746feebe2c5e88b162e3ba9a28aeb1addd4e72cd

  • SSDEEP

    6144:P4lSJ92pCryG4kfjSGwEi56AOLGzvvPWlO6f0bye8jRJmQz0D:P4lm2wryNSIz/W1eGRJmQAD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      6939d6bc51dfa5679e0925446099f8e092c7c6b104d99b6d6788e5e6a00ed35d

    • Size

      378KB

    • MD5

      68eb069a3c73bc55fa7db250df1a5da5

    • SHA1

      410f4364285724b19efd19950081f4af93b66ccc

    • SHA256

      6939d6bc51dfa5679e0925446099f8e092c7c6b104d99b6d6788e5e6a00ed35d

    • SHA512

      b114eea79f6063829ac723a49ebe14d10d1c2477d7d1c9a95bdbe8e5a50b721938896fc07ee39da6d56a4094746feebe2c5e88b162e3ba9a28aeb1addd4e72cd

    • SSDEEP

      6144:P4lSJ92pCryG4kfjSGwEi56AOLGzvvPWlO6f0bye8jRJmQz0D:P4lm2wryNSIz/W1eGRJmQAD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks