General

  • Target

    f1d81c9a67bdec9aabc76b75a4446b81e4c76eaec82dc3d3e1d192344426f975

  • Size

    378KB

  • Sample

    231006-w7278ahc57

  • MD5

    79cbf924e425753827d48146d83e1f62

  • SHA1

    696299174e5f7f1f970ac395e913287edac22c3b

  • SHA256

    f1d81c9a67bdec9aabc76b75a4446b81e4c76eaec82dc3d3e1d192344426f975

  • SHA512

    fe4ff19ddfd4a40944286cb2c67ef0fd2ca0a43edbbeaeaea1ff6a3e596e9fcaca5f98585639a8792dcdfe38ac65c5ea74f0c7dacee482ef80c64eefcf9d7f83

  • SSDEEP

    6144:e4RSq92pCryG4kfjSGwEi56AO8GGzmUarBzj5rIJjRM44o0D:e4RX2wryNSZL1BzjAS9D

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      f1d81c9a67bdec9aabc76b75a4446b81e4c76eaec82dc3d3e1d192344426f975

    • Size

      378KB

    • MD5

      79cbf924e425753827d48146d83e1f62

    • SHA1

      696299174e5f7f1f970ac395e913287edac22c3b

    • SHA256

      f1d81c9a67bdec9aabc76b75a4446b81e4c76eaec82dc3d3e1d192344426f975

    • SHA512

      fe4ff19ddfd4a40944286cb2c67ef0fd2ca0a43edbbeaeaea1ff6a3e596e9fcaca5f98585639a8792dcdfe38ac65c5ea74f0c7dacee482ef80c64eefcf9d7f83

    • SSDEEP

      6144:e4RSq92pCryG4kfjSGwEi56AO8GGzmUarBzj5rIJjRM44o0D:e4RX2wryNSZL1BzjAS9D

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks