mystic | 164255283eeb9b38d4be91e9216b2f09a103f9cc91fa108aec1d0d350ca6b053 | Triage

Sharing

General

Target

164255283eeb9b38d4be91e9216b2f09a103f9cc91fa108aec1d0d350ca6b053
Size

1.1MB
Sample

231007-gsfncabf94
MD5

e7f29032f3b99cd587505f3878836186
SHA1

fa11c85f1e661d93f4abc3ec8c1a776bcd8dea8a
SHA256

164255283eeb9b38d4be91e9216b2f09a103f9cc91fa108aec1d0d350ca6b053
SHA512

f7a9e7e8dc787871c6284b22a39bda8472356440e38e79b192e7bc50185de5409ac6fbe11457889fbaf237b92843dbe846f67aba2524ef4d0e9c4898e234936c
SSDEEP

24576:VyWhQIAjgtadq7GPJ6xnIPMqRaCJmrk4Yu5AvQMrFJ:wWFAjitYJwI1gCJjPu5AI

Score

10^/10

mystic evasion persistence stealer trojan

Malware Config

Targets

- Target
  
  164255283eeb9b38d4be91e9216b2f09a103f9cc91fa108aec1d0d350ca6b053
- Size
  
  1.1MB
- MD5
  
  e7f29032f3b99cd587505f3878836186
- SHA1
  
  fa11c85f1e661d93f4abc3ec8c1a776bcd8dea8a
- SHA256
  
  164255283eeb9b38d4be91e9216b2f09a103f9cc91fa108aec1d0d350ca6b053
- SHA512
  
  f7a9e7e8dc787871c6284b22a39bda8472356440e38e79b192e7bc50185de5409ac6fbe11457889fbaf237b92843dbe846f67aba2524ef4d0e9c4898e234936c
- SSDEEP
  
  24576:VyWhQIAjgtadq7GPJ6xnIPMqRaCJmrk4Yu5AvQMrFJ:wWFAjitYJwI1gCJjPu5AI
Score

10^/10

mystic evasion persistence stealer trojan
- Detect Mystic stealer payload
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Mystic
  Mystic is an infostealer written in C++.
  stealer mystic
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

mysticevasionpersistencestealertrojan