Overview

overview

10

Static

static

3

3703973472...15.exe

windows7-x64

10

3703973472...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37039734722887d3e0608288bb7a62ddc24545b092d49e1d9413fdb060a48c15

  • Size

    1016KB

  • Sample

    231011-h7e6sshf4z

  • MD5

    6c591851197d7f906bbd1deb2d213fae

  • SHA1

    9ba2ad55ca33d307ca613f5367c39d49eb8f4c2b

  • SHA256

    37039734722887d3e0608288bb7a62ddc24545b092d49e1d9413fdb060a48c15

  • SHA512

    d7289f835f32b9f75f8053d14448b714a57f2ccce3c2a007df364473a17d1b667a3a5e72aef459da81cf27d24d6ba77fa67ec88a98f0d3adbf096a1e2fdeede4

  • SSDEEP

    12288:k+FAoeYjBYDKzcx9jkmP8buy7/0RDMmZZxnyUuyyuT+kF/SX7FJ0e/9:kfQYDKzcx9jkmP+/knxyC/67719

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      37039734722887d3e0608288bb7a62ddc24545b092d49e1d9413fdb060a48c15

    • Size

      1016KB

    • MD5

      6c591851197d7f906bbd1deb2d213fae

    • SHA1

      9ba2ad55ca33d307ca613f5367c39d49eb8f4c2b

    • SHA256

      37039734722887d3e0608288bb7a62ddc24545b092d49e1d9413fdb060a48c15

    • SHA512

      d7289f835f32b9f75f8053d14448b714a57f2ccce3c2a007df364473a17d1b667a3a5e72aef459da81cf27d24d6ba77fa67ec88a98f0d3adbf096a1e2fdeede4

    • SSDEEP

      12288:k+FAoeYjBYDKzcx9jkmP8buy7/0RDMmZZxnyUuyyuT+kF/SX7FJ0e/9:kfQYDKzcx9jkmP+/knxyC/67719

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks