Overview

overview

10

Static

static

3

69e9fce412...69.exe

windows7-x64

10

69e9fce412...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69e9fce41200b16ad14ae40206788b13eeb0aac77cedf143a5903bdc9be22f69

  • Size

    1016KB

  • Sample

    231011-kdveqsdd65

  • MD5

    2a439fc1900c7f0400091a2c51429d88

  • SHA1

    590059269cb17698b2c1c027100ff878443efdc5

  • SHA256

    69e9fce41200b16ad14ae40206788b13eeb0aac77cedf143a5903bdc9be22f69

  • SHA512

    01a40f21313657232984c5544d286bd257046b7488a187274fdaf8062ed0f0ec1a88bcb7653c53fae201e2d77f7d3a2b4c143a6ab7da7a080910406e15e68720

  • SSDEEP

    12288:W+SAolY6BYDKzcx9jkmP8buy7/0RDMmZZxnyUuyyu0+QJhzv/9:WRBYDKzcx9jkmP+/knxy55zzH9

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      69e9fce41200b16ad14ae40206788b13eeb0aac77cedf143a5903bdc9be22f69

    • Size

      1016KB

    • MD5

      2a439fc1900c7f0400091a2c51429d88

    • SHA1

      590059269cb17698b2c1c027100ff878443efdc5

    • SHA256

      69e9fce41200b16ad14ae40206788b13eeb0aac77cedf143a5903bdc9be22f69

    • SHA512

      01a40f21313657232984c5544d286bd257046b7488a187274fdaf8062ed0f0ec1a88bcb7653c53fae201e2d77f7d3a2b4c143a6ab7da7a080910406e15e68720

    • SSDEEP

      12288:W+SAolY6BYDKzcx9jkmP8buy7/0RDMmZZxnyUuyyu0+QJhzv/9:WRBYDKzcx9jkmP+/knxy55zzH9

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks