Overview

overview

10

Static

static

3

8e7c2cf781...51.exe

windows7-x64

10

8e7c2cf781...51.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e7c2cf781438aba859860502ce636aca736a522a814382e07a13eaf18c0d951

  • Size

    350KB

  • Sample

    231011-mp6y1sbc28

  • MD5

    7696cb1512bd42756162356966209973

  • SHA1

    d712448ae4eb2735ed8ef19a70af151f41fe0d19

  • SHA256

    8e7c2cf781438aba859860502ce636aca736a522a814382e07a13eaf18c0d951

  • SHA512

    69299f4e2a3e679d76b6089a253213799e45df6c2d1bb0af0fa0cee8ad463601f23f9e18f4204cb4f4510ed3a53254b4040afea0da44036d7382f60ee1801a61

  • SSDEEP

    6144:ItJLsrNJmc30jXud9b7zAOep70n64n/7tRUlAL3BLwtO2vrpXaJF4S:IcxJm+bzQpwn64n/jUGL35wtHr8F4S

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      8e7c2cf781438aba859860502ce636aca736a522a814382e07a13eaf18c0d951

    • Size

      350KB

    • MD5

      7696cb1512bd42756162356966209973

    • SHA1

      d712448ae4eb2735ed8ef19a70af151f41fe0d19

    • SHA256

      8e7c2cf781438aba859860502ce636aca736a522a814382e07a13eaf18c0d951

    • SHA512

      69299f4e2a3e679d76b6089a253213799e45df6c2d1bb0af0fa0cee8ad463601f23f9e18f4204cb4f4510ed3a53254b4040afea0da44036d7382f60ee1801a61

    • SSDEEP

      6144:ItJLsrNJmc30jXud9b7zAOep70n64n/7tRUlAL3BLwtO2vrpXaJF4S:IcxJm+bzQpwn64n/jUGL35wtHr8F4S

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks