Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    618fb792b6e084b763990ce2b947f940e4c4739f486d149d747935368feeac0d

  • Size

    1.2MB

  • Sample

    231007-f6v5hsbf25

  • MD5

    1f2377c551e30a35e226a7ac40c2b78f

  • SHA1

    62afab15630e238061aa6b6b9bd6070760d29de4

  • SHA256

    618fb792b6e084b763990ce2b947f940e4c4739f486d149d747935368feeac0d

  • SHA512

    46d9defe82cc96987f9931a08ad95327b1d012395fdefaf95e26d86a472081ccc5a1dad6ef5038d1ab3bb1952c6b9165e32ae71a5f09d92d69a3e98bc44cdc3e

  • SSDEEP

    24576:iyvTnLYZsXqZkShR34W+U1uze26lMuFZiSKDosmAkwO7SZs:JyDZkShR3BTR26PFsbDffO7SZ

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      618fb792b6e084b763990ce2b947f940e4c4739f486d149d747935368feeac0d

    • Size

      1.2MB

    • MD5

      1f2377c551e30a35e226a7ac40c2b78f

    • SHA1

      62afab15630e238061aa6b6b9bd6070760d29de4

    • SHA256

      618fb792b6e084b763990ce2b947f940e4c4739f486d149d747935368feeac0d

    • SHA512

      46d9defe82cc96987f9931a08ad95327b1d012395fdefaf95e26d86a472081ccc5a1dad6ef5038d1ab3bb1952c6b9165e32ae71a5f09d92d69a3e98bc44cdc3e

    • SSDEEP

      24576:iyvTnLYZsXqZkShR34W+U1uze26lMuFZiSKDosmAkwO7SZs:JyDZkShR3BTR26PFsbDffO7SZ

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks