Overview

overview

10

Static

static

3

99f4d305da...55.exe

windows7-x64

10

99f4d305da...55.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    99f4d305dad24e51cc901e0efb249a3170739a305155275e825288d2350a3855

  • Size

    356KB

  • Sample

    231010-17c1jsha25

  • MD5

    772339d43f83faf56f21c2ee1b5fcbf7

  • SHA1

    f8a7c6aeb5947b4e4cd71d7a7bbd0ac265c12e47

  • SHA256

    99f4d305dad24e51cc901e0efb249a3170739a305155275e825288d2350a3855

  • SHA512

    7aa38fa51f0f3f2defbf6a5c4ebb9754bc4281588be03d2f0a3120ad68883266a4122f0cac4cc1f4fac93acaece40597cda0e2c2cbb586b9e456a1732fdf8c1b

  • SSDEEP

    6144:moTeW/s5GqrO5aXnfEGIXWPvZAOuy5Uz2AFXutdDFXE6HiJK3V3Hgih7Vs0BC+:OmcGqrOk86xQKAAvHiaV3gih5s0BC+

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      99f4d305dad24e51cc901e0efb249a3170739a305155275e825288d2350a3855

    • Size

      356KB

    • MD5

      772339d43f83faf56f21c2ee1b5fcbf7

    • SHA1

      f8a7c6aeb5947b4e4cd71d7a7bbd0ac265c12e47

    • SHA256

      99f4d305dad24e51cc901e0efb249a3170739a305155275e825288d2350a3855

    • SHA512

      7aa38fa51f0f3f2defbf6a5c4ebb9754bc4281588be03d2f0a3120ad68883266a4122f0cac4cc1f4fac93acaece40597cda0e2c2cbb586b9e456a1732fdf8c1b

    • SSDEEP

      6144:moTeW/s5GqrO5aXnfEGIXWPvZAOuy5Uz2AFXutdDFXE6HiJK3V3Hgih7Vs0BC+:OmcGqrOk86xQKAAvHiaV3gih5s0BC+

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks