Overview

overview

10

Static

static

3

3e8ab914e8...19.exe

windows7-x64

10

3e8ab914e8...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e8ab914e87fde194a381cec7345a85021976dd05b7d6c2dcb80d2c54057dc19

  • Size

    276KB

  • Sample

    231010-y5ckwsba96

  • MD5

    e151127962cfab49d400ff6ef155da93

  • SHA1

    b26704b567b124dec5b942c452e3be27931f74c8

  • SHA256

    3e8ab914e87fde194a381cec7345a85021976dd05b7d6c2dcb80d2c54057dc19

  • SHA512

    da96a369b7847b2820515951a1a342a8d34410fc1d60122383da214dc38c6931c50ad9a2c57d23b22eb70dd11b80a6f0e7f56e7ba4bed4ca962ec41ce0e2e03b

  • SSDEEP

    6144:WhkUKajWpVP06izoorEPdU5LtI2cwVerj:WXKajWuooredk6j

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      3e8ab914e87fde194a381cec7345a85021976dd05b7d6c2dcb80d2c54057dc19

    • Size

      276KB

    • MD5

      e151127962cfab49d400ff6ef155da93

    • SHA1

      b26704b567b124dec5b942c452e3be27931f74c8

    • SHA256

      3e8ab914e87fde194a381cec7345a85021976dd05b7d6c2dcb80d2c54057dc19

    • SHA512

      da96a369b7847b2820515951a1a342a8d34410fc1d60122383da214dc38c6931c50ad9a2c57d23b22eb70dd11b80a6f0e7f56e7ba4bed4ca962ec41ce0e2e03b

    • SSDEEP

      6144:WhkUKajWpVP06izoorEPdU5LtI2cwVerj:WXKajWuooredk6j

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks