General

  • Target

    0d358c430f94b2eda8114142219f2a94.exe

  • Size

    356KB

  • Sample

    231011-f5g69sbg8w

  • MD5

    0d358c430f94b2eda8114142219f2a94

  • SHA1

    0b902e4fff9ecae989869750a535116a80cc364e

  • SHA256

    cc92de366cb49d9c9de26dd8a480cb350e645878df652f776ba424f4053203b1

  • SHA512

    54b490a60ff75d3860ffe7c2da7216205587656ff1a8d83e6e1de6e79bad05ae2b16702cb88e1bbe834af95e23b381cef1956348abba757461d9a946c3f7dc55

  • SSDEEP

    6144:waTeW/s5GqrO5aXnfEGIXWPvZAOAyVyjzQMRq0+TG5Utr27mv6iQhiIcubKDVs0z:ymcGqrOk86xUtrmBs0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      0d358c430f94b2eda8114142219f2a94.exe

    • Size

      356KB

    • MD5

      0d358c430f94b2eda8114142219f2a94

    • SHA1

      0b902e4fff9ecae989869750a535116a80cc364e

    • SHA256

      cc92de366cb49d9c9de26dd8a480cb350e645878df652f776ba424f4053203b1

    • SHA512

      54b490a60ff75d3860ffe7c2da7216205587656ff1a8d83e6e1de6e79bad05ae2b16702cb88e1bbe834af95e23b381cef1956348abba757461d9a946c3f7dc55

    • SSDEEP

      6144:waTeW/s5GqrO5aXnfEGIXWPvZAOAyVyjzQMRq0+TG5Utr27mv6iQhiIcubKDVs0z:ymcGqrOk86xUtrmBs0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks