General

  • Target

    f7cb850d3461f742356beb890fc8eb14af08185d3f371bbf35ca39c8583cd24f

  • Size

    356KB

  • Sample

    231010-2pc39sab65

  • MD5

    e7e09c5075a4b1659442d3d3a6663ddf

  • SHA1

    4011e1a610ae62c1c7329985de9635d782aef860

  • SHA256

    f7cb850d3461f742356beb890fc8eb14af08185d3f371bbf35ca39c8583cd24f

  • SHA512

    79766c71cc9aaacb958de6f195341ca76c1ef7ae583605b92df836655d8aa45672f4057f1efedf25f307f6fdc67c25e0b0d80d62ae0b59bb46267fa8617edb90

  • SSDEEP

    6144:khTeW/s5GqrO5aXnfEGIXWPvZAONyMY2EO0+h8vIj0AKUVkullH9aEvLe9Vs0BC+:RmcGqrOk86x/YEv+s0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      f7cb850d3461f742356beb890fc8eb14af08185d3f371bbf35ca39c8583cd24f

    • Size

      356KB

    • MD5

      e7e09c5075a4b1659442d3d3a6663ddf

    • SHA1

      4011e1a610ae62c1c7329985de9635d782aef860

    • SHA256

      f7cb850d3461f742356beb890fc8eb14af08185d3f371bbf35ca39c8583cd24f

    • SHA512

      79766c71cc9aaacb958de6f195341ca76c1ef7ae583605b92df836655d8aa45672f4057f1efedf25f307f6fdc67c25e0b0d80d62ae0b59bb46267fa8617edb90

    • SSDEEP

      6144:khTeW/s5GqrO5aXnfEGIXWPvZAONyMY2EO0+h8vIj0AKUVkullH9aEvLe9Vs0BC+:RmcGqrOk86x/YEv+s0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks