General

  • Target

    4f128b2da9cf6f5aa8651941b942f2ad725b1cb380c15733e5164befc5ea5d89

  • Size

    396KB

  • Sample

    231011-1rdxxaef9t

  • MD5

    5e98ccd93dc75c6ee086a80a4f55d042

  • SHA1

    092bdfd409a879517988eacfedae0bbbf6687030

  • SHA256

    4f128b2da9cf6f5aa8651941b942f2ad725b1cb380c15733e5164befc5ea5d89

  • SHA512

    2603f6981d826cd88eed6ec9ad937a966002aa735cbc91fd7ef841b1c9f8dc257e4529b069fb51d1c6ec2942b45993ed0813df1e2266871070d56d18ccd68b5a

  • SSDEEP

    6144:RN0hUOqW5XJ6EDOpvOCm5MNuAO40/ukCCFRIiKrXjX9Reevlqwh:RNadqW5sEe2uu2PDCXINtRx8wh

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      4f128b2da9cf6f5aa8651941b942f2ad725b1cb380c15733e5164befc5ea5d89

    • Size

      396KB

    • MD5

      5e98ccd93dc75c6ee086a80a4f55d042

    • SHA1

      092bdfd409a879517988eacfedae0bbbf6687030

    • SHA256

      4f128b2da9cf6f5aa8651941b942f2ad725b1cb380c15733e5164befc5ea5d89

    • SHA512

      2603f6981d826cd88eed6ec9ad937a966002aa735cbc91fd7ef841b1c9f8dc257e4529b069fb51d1c6ec2942b45993ed0813df1e2266871070d56d18ccd68b5a

    • SSDEEP

      6144:RN0hUOqW5XJ6EDOpvOCm5MNuAO40/ukCCFRIiKrXjX9Reevlqwh:RNadqW5sEe2uu2PDCXINtRx8wh

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks