General

  • Target

    b16e31a3de24e53c79029c6d6ac71401fde56be91191579686306dd6947106e1

  • Size

    378KB

  • Sample

    231007-vlqfvsgc57

  • MD5

    26f3befa52df906bf8e8101bfadf11fc

  • SHA1

    db0b192549032229e3a516e8f43edfc2870f7cb0

  • SHA256

    b16e31a3de24e53c79029c6d6ac71401fde56be91191579686306dd6947106e1

  • SHA512

    b217bcdd4af61b54f7a139aa92184d97123d6da5e118a63cbe032feda9c05bcec6057d0665c581db0fc57aaf306ee104b4ff50f69193b97a0e0acb83b20ad02c

  • SSDEEP

    6144:84CSF92pCryG4kfjSGwEi56AOCGW8Mthi8UtLA3aGnPWD9l4VHR0D:84Cu2wryNSfWHthPXP+rD

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      b16e31a3de24e53c79029c6d6ac71401fde56be91191579686306dd6947106e1

    • Size

      378KB

    • MD5

      26f3befa52df906bf8e8101bfadf11fc

    • SHA1

      db0b192549032229e3a516e8f43edfc2870f7cb0

    • SHA256

      b16e31a3de24e53c79029c6d6ac71401fde56be91191579686306dd6947106e1

    • SHA512

      b217bcdd4af61b54f7a139aa92184d97123d6da5e118a63cbe032feda9c05bcec6057d0665c581db0fc57aaf306ee104b4ff50f69193b97a0e0acb83b20ad02c

    • SSDEEP

      6144:84CSF92pCryG4kfjSGwEi56AOCGW8Mthi8UtLA3aGnPWD9l4VHR0D:84Cu2wryNSfWHthPXP+rD

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks