General

  • Target

    7c89a7f867b808dc44b4feac875eac8f48e6099d75afccbc1c0a05403146ee15

  • Size

    356KB

  • Sample

    231010-1pxbgadg3w

  • MD5

    e506f460d15f3a55c47780ade2617a7b

  • SHA1

    239fb562bac9aa74fcde7e4d208da72a705aac9c

  • SHA256

    7c89a7f867b808dc44b4feac875eac8f48e6099d75afccbc1c0a05403146ee15

  • SHA512

    1ede0d3152c9347b8fd3fdb0ab5e53f0ff6ed793056a38e53d82f18db2359e8fc02fde195c0cda2df0c146d56d82fe65020482207461d9eca590caa80a0c7810

  • SSDEEP

    6144:RiTeW/s5GqrO5aXnfEGIXWPvZAOmyn1qtljHVfN3Vxdc4KJJyMymU0Vs0BC+:NmcGqrOk86xCHHJ9VxNQs0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      7c89a7f867b808dc44b4feac875eac8f48e6099d75afccbc1c0a05403146ee15

    • Size

      356KB

    • MD5

      e506f460d15f3a55c47780ade2617a7b

    • SHA1

      239fb562bac9aa74fcde7e4d208da72a705aac9c

    • SHA256

      7c89a7f867b808dc44b4feac875eac8f48e6099d75afccbc1c0a05403146ee15

    • SHA512

      1ede0d3152c9347b8fd3fdb0ab5e53f0ff6ed793056a38e53d82f18db2359e8fc02fde195c0cda2df0c146d56d82fe65020482207461d9eca590caa80a0c7810

    • SSDEEP

      6144:RiTeW/s5GqrO5aXnfEGIXWPvZAOmyn1qtljHVfN3Vxdc4KJJyMymU0Vs0BC+:NmcGqrOk86xCHHJ9VxNQs0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks