General

  • Target

    62fc287d90fd46527f5474fb5d5cc94b34ebe60fdf778e38969c8c96aabaa806

  • Size

    356KB

  • Sample

    231010-2mr5eafh8z

  • MD5

    c2b2157109b6b502ae0249c6841ca858

  • SHA1

    6dccec36031377b592aafbba5da1c011d74c5541

  • SHA256

    62fc287d90fd46527f5474fb5d5cc94b34ebe60fdf778e38969c8c96aabaa806

  • SHA512

    645d44d3e030dbfa42a17d54389bf53c4baf5d6e1f6a64e691d08ae31d9481ceedfaff1f035793792af3a96ec776e79585c90039b8f41669cf67d3bebd613f27

  • SSDEEP

    6144:OQTeW/s5GqrO5aXnfEGIXWPvZAOEy28HmnIwruv6VuTskposHVs0BC+:amcGqrOk86xq8GnKv6Vuwkus1s0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      62fc287d90fd46527f5474fb5d5cc94b34ebe60fdf778e38969c8c96aabaa806

    • Size

      356KB

    • MD5

      c2b2157109b6b502ae0249c6841ca858

    • SHA1

      6dccec36031377b592aafbba5da1c011d74c5541

    • SHA256

      62fc287d90fd46527f5474fb5d5cc94b34ebe60fdf778e38969c8c96aabaa806

    • SHA512

      645d44d3e030dbfa42a17d54389bf53c4baf5d6e1f6a64e691d08ae31d9481ceedfaff1f035793792af3a96ec776e79585c90039b8f41669cf67d3bebd613f27

    • SSDEEP

      6144:OQTeW/s5GqrO5aXnfEGIXWPvZAOEy28HmnIwruv6VuTskposHVs0BC+:amcGqrOk86xq8GnKv6Vuwkus1s0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks