Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    276KB

  • Sample

    231010-z3f1zade33

  • MD5

    922b7cc52f8f84fc5b73a749b845bce4

  • SHA1

    149b0ba27092abb9992d2576b94043bc9aa2f3f2

  • SHA256

    865ae1c546b12381f15add47b63c8e4ee09ba8f3a6748ae7ddb255f16f78c972

  • SHA512

    ddd9ef044467737b013b0665df488c4a90954e515a5cb507acf3f06de33f1ba3ffd8a727cec4e3e65af195605fed87043c7de3a06f9d65bd1d46f685df7b49b2

  • SSDEEP

    6144:WhtYk2jWRsLz6zpclVdU5SnJFYAqMQVOkh5UChk6qBBfjy1Oj:Wsk2jWVcDZqpObCGVBfjycj

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      file.exe

    • Size

      276KB

    • MD5

      922b7cc52f8f84fc5b73a749b845bce4

    • SHA1

      149b0ba27092abb9992d2576b94043bc9aa2f3f2

    • SHA256

      865ae1c546b12381f15add47b63c8e4ee09ba8f3a6748ae7ddb255f16f78c972

    • SHA512

      ddd9ef044467737b013b0665df488c4a90954e515a5cb507acf3f06de33f1ba3ffd8a727cec4e3e65af195605fed87043c7de3a06f9d65bd1d46f685df7b49b2

    • SSDEEP

      6144:WhtYk2jWRsLz6zpclVdU5SnJFYAqMQVOkh5UChk6qBBfjy1Oj:Wsk2jWVcDZqpObCGVBfjycj

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks