Overview

overview

10

Static

static

3

52922bd0f9...82.exe

windows7-x64

10

52922bd0f9...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52922bd0f9fa59738b76b40ec1bc94ff122574a2c78be0b85568c5c6770d5682

  • Size

    196KB

  • Sample

    231011-lt2pesgh97

  • MD5

    1d6d39998530b1f7f6b507f65c5a886c

  • SHA1

    f20035491688e19a4cfcaa390cfdb09c31781b13

  • SHA256

    6e83e8880382efdac4a5ebe8beb80e8785db6f49f0619469a206fd7af6a7c407

  • SHA512

    d2b4e25c6e6a9dbbed763f881a1d6d258cc115f6c2c686cb5cffdbea49dfe88e0f09203fb526bfa59586640e3d0bddfa7e8aaf34b2b142b3f4709da4313dc746

  • SSDEEP

    6144:tKMdYT6c+mcdyyD6Ir7ykICOv0i2e5vnO:t1YTpjcPD6IXUb0m5G

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      52922bd0f9fa59738b76b40ec1bc94ff122574a2c78be0b85568c5c6770d5682

    • Size

      350KB

    • MD5

      da9bde95f77b953bd8189c714b63661f

    • SHA1

      f24a7bff041a6d4df473991513cea00f5f6d43d0

    • SHA256

      52922bd0f9fa59738b76b40ec1bc94ff122574a2c78be0b85568c5c6770d5682

    • SHA512

      7e993983190b70aa19e49c30204b6eb7f0723a47284c3779fd1dc71d60626deb0ad5f30a40e1a2b25ec4745ee7b7f0bae1bbf4643093cedd322395eebf8b8da6

    • SSDEEP

      6144:ptcLsrNJmc30jXud9b7zAO7p70n6pugBxy6sxcAATAiI0aJF4S:pvxJm+bzZpwn6ZxyDxJAEXF4S

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks