General
- Target 2c1fe61a9b2fb13ef092943739e09b41c5035d3726448709c148a5bc627f5584
- Size 378KB
- Sample231007-wlm66sgf32
- SHA256 2c1fe61a9b2fb13ef092943739e09b41c5035d3726448709c148a5bc627f5584
- MD5 6f5c177e94b56f66ac1ea68caa84b4be
- SHA1 98a3bad73fc858b86086b3e7b3f0a7f0f46379ae
- SHA512 c998ce3f8cc480c5909db53b626d8d0c4a9fc4911aebbe2b577b1b24e6a174cd13aabdbe879ba99667137c8e2f1ce82090f060f9cc628b063328fd78e7c94aff
- SSDEEP 6144:J4PSj92pCryG4kfjSGwEi56AONGU5NFjhjXmtPwQPU0D:J4Po2wryNSmU5XjhjJQBD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Extracted
Family
-
mystic
C2
-
http://5.42.92.211/loghub/master
Targets
-
- Target 2c1fe61a9b2fb13ef092943739e09b41c5035d3726448709c148a5bc627f5584
- Size 378KB
- SHA256 2c1fe61a9b2fb13ef092943739e09b41c5035d3726448709c148a5bc627f5584
- MD5 6f5c177e94b56f66ac1ea68caa84b4be
- SHA1 98a3bad73fc858b86086b3e7b3f0a7f0f46379ae
- SHA512 c998ce3f8cc480c5909db53b626d8d0c4a9fc4911aebbe2b577b1b24e6a174cd13aabdbe879ba99667137c8e2f1ce82090f060f9cc628b063328fd78e7c94aff
- SSDEEP 6144:J4PSj92pCryG4kfjSGwEi56AONGU5NFjhjXmtPwQPU0D:J4Po2wryNSmU5XjhjJQBD
- MD5 SHA1 SHA512 SSDEEP
Detect Mystic stealer payload
Suspicious use of SetThreadContext