General

  • Target

    b245220ca55d52598a2bb1b10f30f4d8e1ffc42800a6596fe5dc0fc3f75343c1

  • Size

    378KB

  • Sample

    231006-xth3vshe74

  • MD5

    edb8d6606c68907f903c600d2a8d7d7f

  • SHA1

    860ed7a91b76faa575e3a76e333b818c41bdc9af

  • SHA256

    b245220ca55d52598a2bb1b10f30f4d8e1ffc42800a6596fe5dc0fc3f75343c1

  • SHA512

    526e20da72b74b54a5afe9a1e9606cebe0f5a578396e4582590335cbbf29299babb6925b592cc145d7852b3553e3c6be1c8b95e69dae56ac1c92576b8bf75d1c

  • SSDEEP

    6144:fTCTCH557yGY/fjBximSLB5aAOciFqhMIG3SKsCnrBSHtNj:fT7Hr7yV3OW9FoMlsCCj

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      b245220ca55d52598a2bb1b10f30f4d8e1ffc42800a6596fe5dc0fc3f75343c1

    • Size

      378KB

    • MD5

      edb8d6606c68907f903c600d2a8d7d7f

    • SHA1

      860ed7a91b76faa575e3a76e333b818c41bdc9af

    • SHA256

      b245220ca55d52598a2bb1b10f30f4d8e1ffc42800a6596fe5dc0fc3f75343c1

    • SHA512

      526e20da72b74b54a5afe9a1e9606cebe0f5a578396e4582590335cbbf29299babb6925b592cc145d7852b3553e3c6be1c8b95e69dae56ac1c92576b8bf75d1c

    • SSDEEP

      6144:fTCTCH557yGY/fjBximSLB5aAOciFqhMIG3SKsCnrBSHtNj:fT7Hr7yV3OW9FoMlsCCj

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks