Overview

overview

10

Static

static

3

2425acb1e1...d9.exe

windows7-x64

10

2425acb1e1...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2425acb1e1528a19e5855e97a843d4e09c2c1862dde72bca09e0f2985c6dc2d9

  • Size

    356KB

  • Sample

    231010-1223gsee2y

  • MD5

    1c1159009c773a655964c80d60261460

  • SHA1

    9c22e018e7b6bdb2f7e122cc2898ceda4544c7a9

  • SHA256

    2425acb1e1528a19e5855e97a843d4e09c2c1862dde72bca09e0f2985c6dc2d9

  • SHA512

    4157858bf98ffa0b738a00ca2ecdbcfdcaa6bef9cd72be291f64ce44b6393549d6c951a34f7c6240d34098013f46ef8e6cbd1d99f995a40689a1d416f2bb9507

  • SSDEEP

    6144:ma3W8/s5GqrO5aXnfEGIXWMvZAOg0XAiPFgP9y8+92ZqwiJc/es0BC+:k8cGqrOk8JxZr4yBhJCes0BC+

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      2425acb1e1528a19e5855e97a843d4e09c2c1862dde72bca09e0f2985c6dc2d9

    • Size

      356KB

    • MD5

      1c1159009c773a655964c80d60261460

    • SHA1

      9c22e018e7b6bdb2f7e122cc2898ceda4544c7a9

    • SHA256

      2425acb1e1528a19e5855e97a843d4e09c2c1862dde72bca09e0f2985c6dc2d9

    • SHA512

      4157858bf98ffa0b738a00ca2ecdbcfdcaa6bef9cd72be291f64ce44b6393549d6c951a34f7c6240d34098013f46ef8e6cbd1d99f995a40689a1d416f2bb9507

    • SSDEEP

      6144:ma3W8/s5GqrO5aXnfEGIXWMvZAOg0XAiPFgP9y8+92ZqwiJc/es0BC+:k8cGqrOk8JxZr4yBhJCes0BC+

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks