General

  • Target

    a2c9bc7b50def8e84455e289696de3843f7a3cc398826ecba28f2293d0609544

  • Size

    356KB

  • Sample

    231010-2bb9tahd77

  • MD5

    f3ccb4915b813eae646c48b84e30aadc

  • SHA1

    4965383edae445aa058b8c2adefc88dc621722a8

  • SHA256

    a2c9bc7b50def8e84455e289696de3843f7a3cc398826ecba28f2293d0609544

  • SHA512

    dfc4ae977ad2d8f61f54b4083a9b7a6bd9c7cb71cd63be319674397126da0acf011bdef5ea0614ed9680f51c7245408c64a524315b5765beaca30d27721c3477

  • SSDEEP

    6144:hKTeW/s5GqrO5aXnfEGIXWPvZAOnyqvJy+lPVIPaIHvVs0BC+:5mcGqrOk86xx0+l98a4s0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      a2c9bc7b50def8e84455e289696de3843f7a3cc398826ecba28f2293d0609544

    • Size

      356KB

    • MD5

      f3ccb4915b813eae646c48b84e30aadc

    • SHA1

      4965383edae445aa058b8c2adefc88dc621722a8

    • SHA256

      a2c9bc7b50def8e84455e289696de3843f7a3cc398826ecba28f2293d0609544

    • SHA512

      dfc4ae977ad2d8f61f54b4083a9b7a6bd9c7cb71cd63be319674397126da0acf011bdef5ea0614ed9680f51c7245408c64a524315b5765beaca30d27721c3477

    • SSDEEP

      6144:hKTeW/s5GqrO5aXnfEGIXWPvZAOnyqvJy+lPVIPaIHvVs0BC+:5mcGqrOk86xx0+l98a4s0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks