General

  • Target

    58c985b33c8df65ab46c1b99b0cf402dc2fb50018f960d60c3bda9932c62840f

  • Size

    356KB

  • Sample

    231010-2actysfc3s

  • MD5

    0a5a0f183143371fa309353c4bd486d1

  • SHA1

    a98c32f24ebe906b27eef570c446c149ace8c653

  • SHA256

    58c985b33c8df65ab46c1b99b0cf402dc2fb50018f960d60c3bda9932c62840f

  • SHA512

    d2983222451f0d758b9129cc24bac6ec96a58d58004c8d66660074d518a363279aa85972735cb30f90d1fe8965505de7ba6fd9e278f5ed8d0dc52f94183378ce

  • SSDEEP

    6144:y4TeW/s5GqrO5aXnfEGIXWPvZAOCyirC/FXv9VGoKcIC3X3v8q/Vs0BC+:umcGqrOk86xl9Xv9VhGCnfxs0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      58c985b33c8df65ab46c1b99b0cf402dc2fb50018f960d60c3bda9932c62840f

    • Size

      356KB

    • MD5

      0a5a0f183143371fa309353c4bd486d1

    • SHA1

      a98c32f24ebe906b27eef570c446c149ace8c653

    • SHA256

      58c985b33c8df65ab46c1b99b0cf402dc2fb50018f960d60c3bda9932c62840f

    • SHA512

      d2983222451f0d758b9129cc24bac6ec96a58d58004c8d66660074d518a363279aa85972735cb30f90d1fe8965505de7ba6fd9e278f5ed8d0dc52f94183378ce

    • SSDEEP

      6144:y4TeW/s5GqrO5aXnfEGIXWPvZAOCyirC/FXv9VGoKcIC3X3v8q/Vs0BC+:umcGqrOk86xl9Xv9VhGCnfxs0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks