General
- Target df865b3ba1736db1bb34a554a26462124b71ab7c1654e40380ed9b74129a836e
- Size 378KB
- Sample231007-wznpvsec7w
- SHA256 df865b3ba1736db1bb34a554a26462124b71ab7c1654e40380ed9b74129a836e
- MD5 01fd7c73523235a2a5e3d8e8d6a896cc
- SHA1 49f7a6a444522d6b3ebeab1b4e288fe516a385da
- SHA512 048c2844e32f7817d4afb5cb87ed2564e7eb29d0ecc195001ddd074713299bc1a4fdf895114b8f26a25aa51540d15b7fc5d0443bd0d711c05cd1827a10467449
- SSDEEP 6144:s4/SL92pCryG4kfjSGwEi56AOGG2E9bI7zZ3CpONLZAa+zI32f+0D:s4/M2wryNS7xIZCpGX+jD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Extracted
Family
-
mystic
C2
-
http://5.42.92.211/loghub/master
Targets
-
- Target df865b3ba1736db1bb34a554a26462124b71ab7c1654e40380ed9b74129a836e
- Size 378KB
- SHA256 df865b3ba1736db1bb34a554a26462124b71ab7c1654e40380ed9b74129a836e
- MD5 01fd7c73523235a2a5e3d8e8d6a896cc
- SHA1 49f7a6a444522d6b3ebeab1b4e288fe516a385da
- SHA512 048c2844e32f7817d4afb5cb87ed2564e7eb29d0ecc195001ddd074713299bc1a4fdf895114b8f26a25aa51540d15b7fc5d0443bd0d711c05cd1827a10467449
- SSDEEP 6144:s4/SL92pCryG4kfjSGwEi56AOGG2E9bI7zZ3CpONLZAa+zI32f+0D:s4/M2wryNS7xIZCpGX+jD
- MD5 SHA1 SHA512 SSDEEP
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext