General
- Target b6616c25730363bcef72700515881df1a25dae0ac29dbdaab3e923e93e5806af
- Size 378KB
- Sample231007-wfktvsge78
- SHA256 b6616c25730363bcef72700515881df1a25dae0ac29dbdaab3e923e93e5806af
- MD5 80dded1dbde575d113ec5ec5d9e7285a
- SHA1 a2307d2a0d9dcb721c4889d2dd350e726aaed784
- SHA512 32ca141ce9fc02507efb41fa77a9f72e257e6974eb8fd81bc4dae6f7a6485399d138597ef927aaa9f8dcd3d5434fa76772638c160c105eb87f1d8e07dd5ae01e
- SSDEEP 6144:G4PSF92pCryG4kfjSGwEi56AOsGE4QUgwzAFodsDzmeBpeFa/3l+N0yZ0D0D:G4Pu2wryNShE4kwz+pTQjZ0QD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Extracted
Family
-
mystic
C2
-
http://5.42.92.211/loghub/master
Targets
-
- Target b6616c25730363bcef72700515881df1a25dae0ac29dbdaab3e923e93e5806af
- Size 378KB
- SHA256 b6616c25730363bcef72700515881df1a25dae0ac29dbdaab3e923e93e5806af
- MD5 80dded1dbde575d113ec5ec5d9e7285a
- SHA1 a2307d2a0d9dcb721c4889d2dd350e726aaed784
- SHA512 32ca141ce9fc02507efb41fa77a9f72e257e6974eb8fd81bc4dae6f7a6485399d138597ef927aaa9f8dcd3d5434fa76772638c160c105eb87f1d8e07dd5ae01e
- SSDEEP 6144:G4PSF92pCryG4kfjSGwEi56AOsGE4QUgwzAFodsDzmeBpeFa/3l+N0yZ0D0D:G4Pu2wryNShE4kwz+pTQjZ0QD
- MD5 SHA1 SHA512 SSDEEP
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext