Overview

overview

10

Static

static

3

d7130bd8db...e0.exe

windows7-x64

10

d7130bd8db...e0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7130bd8dbdfdbf60288a0585d856e5a88019337144330d91553ec039161fbe0

  • Size

    350KB

  • Sample

    231011-mlnchaha31

  • MD5

    695d40e443fcad2120abfefad1deb6e7

  • SHA1

    e5759cf3362c88ab3d0780328e65c651d8b4b30e

  • SHA256

    d7130bd8dbdfdbf60288a0585d856e5a88019337144330d91553ec039161fbe0

  • SHA512

    fc282a43852563d6cb8910fe2c2bfa7c373f29be5ed62aa8ec18fc2d5f80a2ed59b378eb765424e37ca260a76f412b286f6981e323cd3efe75d8db5c13b49c4c

  • SSDEEP

    6144:btDLsrNJmc30jXud9b7zAO5p70n6sLxfac7qBjpeh7FJumnTcaJF4S:b+xJm+bzbpwn6sLxSOwjpcZLF4S

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      d7130bd8dbdfdbf60288a0585d856e5a88019337144330d91553ec039161fbe0

    • Size

      350KB

    • MD5

      695d40e443fcad2120abfefad1deb6e7

    • SHA1

      e5759cf3362c88ab3d0780328e65c651d8b4b30e

    • SHA256

      d7130bd8dbdfdbf60288a0585d856e5a88019337144330d91553ec039161fbe0

    • SHA512

      fc282a43852563d6cb8910fe2c2bfa7c373f29be5ed62aa8ec18fc2d5f80a2ed59b378eb765424e37ca260a76f412b286f6981e323cd3efe75d8db5c13b49c4c

    • SSDEEP

      6144:btDLsrNJmc30jXud9b7zAO5p70n6sLxfac7qBjpeh7FJumnTcaJF4S:b+xJm+bzbpwn6sLxSOwjpcZLF4S

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks