General

  • Target

    93d1cebc608a07514709121bb4163ba10a6af96908d8590d40b90ac1313a51e3

  • Size

    379KB

  • Sample

    231011-n9yc2sga22

  • MD5

    79d52dde3ee7f246b11170f7c9f2bb0d

  • SHA1

    320881f4185ce5905d8450a8fd52e4c00ff64662

  • SHA256

    93d1cebc608a07514709121bb4163ba10a6af96908d8590d40b90ac1313a51e3

  • SHA512

    eaac7e69965e50cab3e7a5eb055e0d46a1f2eefe684846beccc68ba44d63b12cbb4a462c7a5625cc5a26f058dead56d7a92c54db2011dbd66a56eca2466eb5b2

  • SSDEEP

    6144:5CucRgs3r9vIum2Tg0N63KAOvau2gPVHwsdODGXGNGU1n5Tg3F:5ClRP3r9Hme5afYH1GNGUh5s3F

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      93d1cebc608a07514709121bb4163ba10a6af96908d8590d40b90ac1313a51e3

    • Size

      379KB

    • MD5

      79d52dde3ee7f246b11170f7c9f2bb0d

    • SHA1

      320881f4185ce5905d8450a8fd52e4c00ff64662

    • SHA256

      93d1cebc608a07514709121bb4163ba10a6af96908d8590d40b90ac1313a51e3

    • SHA512

      eaac7e69965e50cab3e7a5eb055e0d46a1f2eefe684846beccc68ba44d63b12cbb4a462c7a5625cc5a26f058dead56d7a92c54db2011dbd66a56eca2466eb5b2

    • SSDEEP

      6144:5CucRgs3r9vIum2Tg0N63KAOvau2gPVHwsdODGXGNGU1n5Tg3F:5ClRP3r9Hme5afYH1GNGUh5s3F

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks