Overview

overview

10

Static

static

3

a5e04c932b...48.exe

windows7-x64

10

a5e04c932b...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5e04c932b3a7225db748dfd11c82d995336ee52382dfb06bd10288d5ada5f48

  • Size

    356KB

  • Sample

    231011-f2tqwsbe5w

  • MD5

    cf1e152ffc49f11c6aaa950e8d4347bf

  • SHA1

    3803dff7e1cf7dfe3264faf4113c73ecc9b72e9b

  • SHA256

    a5e04c932b3a7225db748dfd11c82d995336ee52382dfb06bd10288d5ada5f48

  • SHA512

    f98679a2ac8fd765f3638bfac27f1083e59863fbe7087d92a95b01eeac12d62906185821c95356c6bce14ba0cd52f8f28f308af7a2d28d94e87d00b7f1e7175e

  • SSDEEP

    6144:FeTeW/s5GqrO5aXnfEGIXWPvZAOPyADL4a97kG3OAUVs0BC+:xmcGqrOk86xFnr97p3lws0BC+

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      a5e04c932b3a7225db748dfd11c82d995336ee52382dfb06bd10288d5ada5f48

    • Size

      356KB

    • MD5

      cf1e152ffc49f11c6aaa950e8d4347bf

    • SHA1

      3803dff7e1cf7dfe3264faf4113c73ecc9b72e9b

    • SHA256

      a5e04c932b3a7225db748dfd11c82d995336ee52382dfb06bd10288d5ada5f48

    • SHA512

      f98679a2ac8fd765f3638bfac27f1083e59863fbe7087d92a95b01eeac12d62906185821c95356c6bce14ba0cd52f8f28f308af7a2d28d94e87d00b7f1e7175e

    • SSDEEP

      6144:FeTeW/s5GqrO5aXnfEGIXWPvZAOPyADL4a97kG3OAUVs0BC+:xmcGqrOk86xFnr97p3lws0BC+

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks