Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    1016KB

  • Sample

    231011-h83cqahg2v

  • MD5

    bc65d604465049597b656b73b1afd328

  • SHA1

    6a9160a225faf54cea360ebcaaf95515d4934c46

  • SHA256

    e8d64a783e8e02f927a12be9ecb7f413fb03916cfebcb0a198bce1e37b9e5554

  • SHA512

    cdc1c5047dccffeab279ff9c42b32f08837f00a681e86b9bb3853ec694f85118bc6c5b9a611fdf6e2e84cfb3ca9a29d25bb215576242f7345eb69e7f644b599e

  • SSDEEP

    12288:T+mAovYIBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyu6pbqFghgL/9:TH/YDKzcx9jkmPe/knxyf0FghC9

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      file.exe

    • Size

      1016KB

    • MD5

      bc65d604465049597b656b73b1afd328

    • SHA1

      6a9160a225faf54cea360ebcaaf95515d4934c46

    • SHA256

      e8d64a783e8e02f927a12be9ecb7f413fb03916cfebcb0a198bce1e37b9e5554

    • SHA512

      cdc1c5047dccffeab279ff9c42b32f08837f00a681e86b9bb3853ec694f85118bc6c5b9a611fdf6e2e84cfb3ca9a29d25bb215576242f7345eb69e7f644b599e

    • SSDEEP

      12288:T+mAovYIBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyu6pbqFghgL/9:TH/YDKzcx9jkmPe/knxyf0FghC9

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks