Overview

overview

10

Static

static

3

c39c0e650c...b1.exe

windows7-x64

10

c39c0e650c...b1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c39c0e650c53272ccb5deb07ac22416ac8b366d795cd33e9ec1f7ca8765cd8b1

  • Size

    346KB

  • Sample

    231011-nk8gqabh6y

  • MD5

    d0db1d7ea0a6cd39a1c236f02ce76cf6

  • SHA1

    a9993a0948ef1252d333ce4682cf3c637b44e407

  • SHA256

    c39c0e650c53272ccb5deb07ac22416ac8b366d795cd33e9ec1f7ca8765cd8b1

  • SHA512

    9541db09eab8d1880f69aaccf43042f8d290104b314e34cc43a34e25f33d5e0540040949f1ff9eb4f13754616073a8bbf5b23ba5fe43c827875c48c1967fa4ef

  • SSDEEP

    6144:K/CFljS9PgGzqLHvw1t6mAOGm3S212JoBfByhUBeyer3viKC:K/mS9PgGimY+J1269BxwiKC

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      c39c0e650c53272ccb5deb07ac22416ac8b366d795cd33e9ec1f7ca8765cd8b1

    • Size

      346KB

    • MD5

      d0db1d7ea0a6cd39a1c236f02ce76cf6

    • SHA1

      a9993a0948ef1252d333ce4682cf3c637b44e407

    • SHA256

      c39c0e650c53272ccb5deb07ac22416ac8b366d795cd33e9ec1f7ca8765cd8b1

    • SHA512

      9541db09eab8d1880f69aaccf43042f8d290104b314e34cc43a34e25f33d5e0540040949f1ff9eb4f13754616073a8bbf5b23ba5fe43c827875c48c1967fa4ef

    • SSDEEP

      6144:K/CFljS9PgGzqLHvw1t6mAOGm3S212JoBfByhUBeyer3viKC:K/mS9PgGimY+J1269BxwiKC

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks