Extracted

• • Target

    NEAS.bdd6f578b8d4d3481e8455f47501fdfc6a6b1c879a73f991472303b99bb73d53_JC.exe

  • Size

    378KB

  • MD5

    e3bb8df19635cf5e24b5d92b9ce91e2d

  • SHA1

    8af1d09db6524485a34ecd1e36c4255d7e6175f1

  • SHA256

    bdd6f578b8d4d3481e8455f47501fdfc6a6b1c879a73f991472303b99bb73d53

  • SHA512

    d6bbd9fae68c9181ae1397fef5462c25b174d34f7caafb9ba07a7bb0847d3efdec3545e7e398d0ebf25951f01596352ecc4c96ee5f2729e7db216d7ce28e85c0

  • SSDEEP

    6144:C4+SI92pCryG4kfjSGwEi56AOoGyQ2TChN6f+mEHSr4eKwHHHU490D:C4+x2wryNSZKTlEHltwn04GD

  Score

  10^/10

  mysticstealer

  • Detect Mystic stealer payload

  • Mystic

    Mystic is an infostealer written in C++.

    stealermystic

  • Suspicious use of SetThreadContext

  behavioral1behavioral2