General

  • Target

    403c9ebfc779aab934e6dc1f3193feaa91c555c31574889f8ac4214d147ce2c6

  • Size

    356KB

  • Sample

    231011-fj3k3saf6t

  • MD5

    9cfe96eace6df0878f271425492d9d40

  • SHA1

    c1c7e11d073268bc3a6d1db5e649e6580c44f555

  • SHA256

    403c9ebfc779aab934e6dc1f3193feaa91c555c31574889f8ac4214d147ce2c6

  • SHA512

    16f8ffdacfa26706e64917ae9735fcdf6dc5bea157e60cae274787a025b81393b7742fba20291a7b0f0ecaaec1d06975ba6d7bd61e73163927f519bc6ba01ee5

  • SSDEEP

    6144:R0TeW/s5GqrO5aXnfEGIXWPvZAOfyVPceYGfTys03I6VAV7Vs0BC+:PmcGqrOk86xajYGzT6VAns0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      403c9ebfc779aab934e6dc1f3193feaa91c555c31574889f8ac4214d147ce2c6

    • Size

      356KB

    • MD5

      9cfe96eace6df0878f271425492d9d40

    • SHA1

      c1c7e11d073268bc3a6d1db5e649e6580c44f555

    • SHA256

      403c9ebfc779aab934e6dc1f3193feaa91c555c31574889f8ac4214d147ce2c6

    • SHA512

      16f8ffdacfa26706e64917ae9735fcdf6dc5bea157e60cae274787a025b81393b7742fba20291a7b0f0ecaaec1d06975ba6d7bd61e73163927f519bc6ba01ee5

    • SSDEEP

      6144:R0TeW/s5GqrO5aXnfEGIXWPvZAOfyVPceYGfTys03I6VAV7Vs0BC+:PmcGqrOk86xajYGzT6VAns0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks