General
- Target 9a170516c621709e293a1cbc9caf7c80aa421226b3010eac6b9974523a8da636
- Size 378KB
- Sample231007-vpd71adh7z
- SHA256 9a170516c621709e293a1cbc9caf7c80aa421226b3010eac6b9974523a8da636
- MD5 1b684babe2a7f42554f6f4ea38c9f290
- SHA1 9cc23aebb04eb064a35b04e5aa39aeaa1b55a9e0
- SHA512 124d27caad2e5edca742ffd501c1f0c1ac7df8a83b7fcfdd161f2d9f1c8a03c7f86b260f33f28c93cf284209cf36df8320fc45641e46993b4fbf10dea684d511
- SSDEEP 6144:/4LSv92pCryG4kfjSGwEi56AOHGNKOM2NqmzeWoDJcdsF2YBLDl0D:/4L42wryNSMAOHqwyDudE7CD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Extracted
Family
-
mystic
C2
-
http://5.42.92.211/loghub/master
Targets
-
- Target 9a170516c621709e293a1cbc9caf7c80aa421226b3010eac6b9974523a8da636
- Size 378KB
- SHA256 9a170516c621709e293a1cbc9caf7c80aa421226b3010eac6b9974523a8da636
- MD5 1b684babe2a7f42554f6f4ea38c9f290
- SHA1 9cc23aebb04eb064a35b04e5aa39aeaa1b55a9e0
- SHA512 124d27caad2e5edca742ffd501c1f0c1ac7df8a83b7fcfdd161f2d9f1c8a03c7f86b260f33f28c93cf284209cf36df8320fc45641e46993b4fbf10dea684d511
- SSDEEP 6144:/4LSv92pCryG4kfjSGwEi56AOHGNKOM2NqmzeWoDJcdsF2YBLDl0D:/4L42wryNSMAOHqwyDudE7CD
- MD5 SHA1 SHA512 SSDEEP
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext