General
-
Target
NEAS.696f9bb8d49eff7dec737f277ef084227623be0ad36beb595642042f29ec0dc8_JC.exe
-
Size
378KB
-
Sample
231007-phg3esca8t
-
MD5
6bb5f10f255b146a3266264464c1ab2f
-
SHA1
5ba21ea81c17b2b2311d235e321b74cd02915865
-
SHA256
696f9bb8d49eff7dec737f277ef084227623be0ad36beb595642042f29ec0dc8
-
SHA512
f61d0059ce0bca39833e358fd5a5e631d54ab23d6945c409e96961b9aa8ecc1377eb39fec448478270b4a27d23a649fd752363cc98fc9f285ca295e0df9688b1
-
SSDEEP
6144:94zSU92pCryG4kfjSGwEi56AOxGlJTQSlxy6FShKEb2dYPXok0D:94zB2wryNSafzF6Kfdi4pD
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.696f9bb8d49eff7dec737f277ef084227623be0ad36beb595642042f29ec0dc8_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
mystic
http://5.42.92.211/loghub/master
Targets
-
-
Target
NEAS.696f9bb8d49eff7dec737f277ef084227623be0ad36beb595642042f29ec0dc8_JC.exe
-
Size
378KB
-
MD5
6bb5f10f255b146a3266264464c1ab2f
-
SHA1
5ba21ea81c17b2b2311d235e321b74cd02915865
-
SHA256
696f9bb8d49eff7dec737f277ef084227623be0ad36beb595642042f29ec0dc8
-
SHA512
f61d0059ce0bca39833e358fd5a5e631d54ab23d6945c409e96961b9aa8ecc1377eb39fec448478270b4a27d23a649fd752363cc98fc9f285ca295e0df9688b1
-
SSDEEP
6144:94zSU92pCryG4kfjSGwEi56AOxGlJTQSlxy6FShKEb2dYPXok0D:94zB2wryNSafzF6Kfdi4pD
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-