General

  • Target

    NEAS.761dfbeb1336a58ac2fca66ee5e28faf48817ecfe6fb3912159a950d30c24d47_JC.exe

  • Size

    378KB

  • Sample

    231007-pqra3acc2v

  • MD5

    0442b7a9e592b1ed245f00b49c5d00e8

  • SHA1

    5173c21fa23ba972e78802958260fca79bd52380

  • SHA256

    761dfbeb1336a58ac2fca66ee5e28faf48817ecfe6fb3912159a950d30c24d47

  • SHA512

    aa5185b7f1bb8c381e5ed4b00456cbb2270e812e9aed83772f4e05a27b823c8bb177dd34b6d42fa2ca9d0f563d7150bfd792f7fdef0624431e03a674025fbaf3

  • SSDEEP

    6144:R4kS292pCryG4kfjSGwEi56AOFGg9bwglT3S5FFNDnUfl0D:R4k72wryNSygZwEW3nUf+D

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      NEAS.761dfbeb1336a58ac2fca66ee5e28faf48817ecfe6fb3912159a950d30c24d47_JC.exe

    • Size

      378KB

    • MD5

      0442b7a9e592b1ed245f00b49c5d00e8

    • SHA1

      5173c21fa23ba972e78802958260fca79bd52380

    • SHA256

      761dfbeb1336a58ac2fca66ee5e28faf48817ecfe6fb3912159a950d30c24d47

    • SHA512

      aa5185b7f1bb8c381e5ed4b00456cbb2270e812e9aed83772f4e05a27b823c8bb177dd34b6d42fa2ca9d0f563d7150bfd792f7fdef0624431e03a674025fbaf3

    • SSDEEP

      6144:R4kS292pCryG4kfjSGwEi56AOFGg9bwglT3S5FFNDnUfl0D:R4k72wryNSygZwEW3nUf+D

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks