Overview

overview

10

Static

static

3

4a7b85b4b1...31.exe

windows7-x64

10

4a7b85b4b1...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4a7b85b4b176d3ae55de8ee113ed596cfe22a3c0624093a8ae22bc20a3b29431

  • Size

    1016KB

  • Sample

    231011-jptrxaad4y

  • MD5

    8e2213fd6244436cc1ede4252a7cb587

  • SHA1

    482b518e8c0ccdb83c6ee7aa6bc265ac60cfdfe0

  • SHA256

    4a7b85b4b176d3ae55de8ee113ed596cfe22a3c0624093a8ae22bc20a3b29431

  • SHA512

    5675455537598c5d597e1469337b230e3d6595a1711bc2e702e10b345de39c68ef3c5ad1f3c152c3a01041ef8336913189e0c28e7c4ae124500f4a5634472bde

  • SSDEEP

    12288:a+jAopYdBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyuHjlYj/h6lru/9:a2aYDKzcx9jkmPe/knxygjyLyW9

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      4a7b85b4b176d3ae55de8ee113ed596cfe22a3c0624093a8ae22bc20a3b29431

    • Size

      1016KB

    • MD5

      8e2213fd6244436cc1ede4252a7cb587

    • SHA1

      482b518e8c0ccdb83c6ee7aa6bc265ac60cfdfe0

    • SHA256

      4a7b85b4b176d3ae55de8ee113ed596cfe22a3c0624093a8ae22bc20a3b29431

    • SHA512

      5675455537598c5d597e1469337b230e3d6595a1711bc2e702e10b345de39c68ef3c5ad1f3c152c3a01041ef8336913189e0c28e7c4ae124500f4a5634472bde

    • SSDEEP

      12288:a+jAopYdBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyuHjlYj/h6lru/9:a2aYDKzcx9jkmPe/knxygjyLyW9

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks