Overview

overview

10

Static

static

3

a51becfacd...24.exe

windows7-x64

10

a51becfacd...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a51becfacdf0e58e96ca8f00ee2dfbd9d38cdf285e264b45ba173de6fcd25324

  • Size

    196KB

  • Sample

    231011-ltf3qaeg8s

  • MD5

    403b62d4f8e63dbbd3bafa3b9915c9c6

  • SHA1

    91e7c52ee4e2a0503573c47a085d4a674439dd17

  • SHA256

    165bf8c29ac857fb65de7762b7df39d6d629fd411f67b8bf2eb2f68b9dafb028

  • SHA512

    1d8fd16de156c96645cba26b4dd8857c0dffd17d89afa69299f47521faa6e2197144da0f2e94fa3c324721f86933a53e4e5325b7686bb900d226733297062cb1

  • SSDEEP

    6144:IWJkLW+zrGkjIdg34Grz1Vcpe6km2oGHBHi:0lzRjK41Vcpbkm2Zs

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      a51becfacdf0e58e96ca8f00ee2dfbd9d38cdf285e264b45ba173de6fcd25324

    • Size

      350KB

    • MD5

      be0a54b888bcbbc83580ccac59fd8766

    • SHA1

      6d28841c7f61a4cc00674601a1ec6501e06df9e0

    • SHA256

      a51becfacdf0e58e96ca8f00ee2dfbd9d38cdf285e264b45ba173de6fcd25324

    • SHA512

      af29df71e4303d12a48cf0f817e8f45491230d68a7c6c8c0e7380ae92927db98cc82c25d212b8bc9da55317f9f27fba3fb2aeabc42ed16a6f1cb574886a01aea

    • SSDEEP

      6144:MtGLsrNJmc30jXud9b7zAO2p70n6dsy4N1ninUtscIYKmI0M6ktu4aJF4S:MJxJm+bz0pwn6drG9thIYfIxxtu7F4S

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks