General

  • Target

    dbd7b08bde46a7a594c63f28263c6adc5e2b8495f60fbde7eca97ef7d93fe2b6

  • Size

    378KB

  • Sample

    231007-t7nzgsgb35

  • MD5

    b045d6f9435cbc72786b427505b964fb

  • SHA1

    ffd2519b65a73b3fb67883a97ad21cc3999d6446

  • SHA256

    dbd7b08bde46a7a594c63f28263c6adc5e2b8495f60fbde7eca97ef7d93fe2b6

  • SHA512

    59fc0205c10b80a6b6a4976f56e600b6605b01c5f75b465d61925e9ef78a865d02ffdcdfb6de014aa4b84efd15cd97dcb95b8ba50b813cd26512a70ab71faa26

  • SSDEEP

    6144:L4LSs92pCryG4kfjSGwEi56AOvGc6L7391U9/EGUsahSYRil/0D:L4Ld2wryNScc639I/EGpSMcD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      dbd7b08bde46a7a594c63f28263c6adc5e2b8495f60fbde7eca97ef7d93fe2b6

    • Size

      378KB

    • MD5

      b045d6f9435cbc72786b427505b964fb

    • SHA1

      ffd2519b65a73b3fb67883a97ad21cc3999d6446

    • SHA256

      dbd7b08bde46a7a594c63f28263c6adc5e2b8495f60fbde7eca97ef7d93fe2b6

    • SHA512

      59fc0205c10b80a6b6a4976f56e600b6605b01c5f75b465d61925e9ef78a865d02ffdcdfb6de014aa4b84efd15cd97dcb95b8ba50b813cd26512a70ab71faa26

    • SSDEEP

      6144:L4LSs92pCryG4kfjSGwEi56AOvGc6L7391U9/EGUsahSYRil/0D:L4Ld2wryNScc639I/EGpSMcD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks