Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    1016KB

  • Sample

    231011-jfksmsaa6v

  • MD5

    0ae8f34f62deba05674264b66ec9dc09

  • SHA1

    83f3cae9e9d29468202ecfc497fc68a58cbc5f3c

  • SHA256

    5a7b48aaa90c48b2ebb50b1d78877f084d01f4daecb42b744844ffa887eefd5d

  • SHA512

    c98cc12b82cb2ab95b3b17416dd2fad972ab4ca4e6ae19fa6b614a1a1179fde25c4dc7a12a9694bac56c83b5ba939ce7e328098b6b0565b3bfb073c6fbae44e6

  • SSDEEP

    12288:X+AAo8YtBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyuyFEmVHvgKF/9:XOqYDKzcx9jkmPe/knxyLFEmdV9

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      file

    • Size

      1016KB

    • MD5

      0ae8f34f62deba05674264b66ec9dc09

    • SHA1

      83f3cae9e9d29468202ecfc497fc68a58cbc5f3c

    • SHA256

      5a7b48aaa90c48b2ebb50b1d78877f084d01f4daecb42b744844ffa887eefd5d

    • SHA512

      c98cc12b82cb2ab95b3b17416dd2fad972ab4ca4e6ae19fa6b614a1a1179fde25c4dc7a12a9694bac56c83b5ba939ce7e328098b6b0565b3bfb073c6fbae44e6

    • SSDEEP

      12288:X+AAo8YtBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyuyFEmVHvgKF/9:XOqYDKzcx9jkmPe/knxyLFEmdV9

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks