General

  • Target

    662193f4157f1b4f4cda079d8f960a98c5b561fce131d7893ad80d05c144b241

  • Size

    356KB

  • Sample

    231011-gajmaaed69

  • MD5

    35891397588aee0703e9924342afe724

  • SHA1

    5bfa128e8030a2e325702cd6c902c5d02d22657d

  • SHA256

    662193f4157f1b4f4cda079d8f960a98c5b561fce131d7893ad80d05c144b241

  • SHA512

    bbb6bab3b2e5d4481722cf09aaf57ab467ef1b8ddb34997da95b170a1cc9ab1e21d103c3c5c951ed9f7bece5e01df6d8c53db315ec0f2b7a008944cdff3b191f

  • SSDEEP

    6144:7qTeW/s5GqrO5aXnfEGIXWPvZAOHyISJyg/IaREVUsP0yp1n+Vs0BC+:3mcGqrOk86xjGxvuUIzfms0BC+

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      662193f4157f1b4f4cda079d8f960a98c5b561fce131d7893ad80d05c144b241

    • Size

      356KB

    • MD5

      35891397588aee0703e9924342afe724

    • SHA1

      5bfa128e8030a2e325702cd6c902c5d02d22657d

    • SHA256

      662193f4157f1b4f4cda079d8f960a98c5b561fce131d7893ad80d05c144b241

    • SHA512

      bbb6bab3b2e5d4481722cf09aaf57ab467ef1b8ddb34997da95b170a1cc9ab1e21d103c3c5c951ed9f7bece5e01df6d8c53db315ec0f2b7a008944cdff3b191f

    • SSDEEP

      6144:7qTeW/s5GqrO5aXnfEGIXWPvZAOHyISJyg/IaREVUsP0yp1n+Vs0BC+:3mcGqrOk86xjGxvuUIzfms0BC+

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks