Overview

overview

10

Static

static

3

51b92b853b...85.exe

windows7-x64

10

51b92b853b...85.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    51b92b853b1036cddc6877845a16fc3daf0b0e860178cde0a9b0065d4cc80685

  • Size

    346KB

  • Sample

    231011-nrzhdsed72

  • MD5

    b5438dcce47a969bb3c85da0845fd8d5

  • SHA1

    1cd09f80884274bca85879466eaf30a51c02a94f

  • SHA256

    51b92b853b1036cddc6877845a16fc3daf0b0e860178cde0a9b0065d4cc80685

  • SHA512

    58b5306701ffcdb384fb6aa6e3614221e630c1138400fdcc64855a447af7451b003cc49c6639738908ead4aac2056a8107f32806a7ac4dc94e804cd3792163df

  • SSDEEP

    6144:/kCFljS9PgGzqLHvw1t6mAOB+Rj36edykkpz5KCDn9DnjUkLzXua3viKC:/kKS9PgGim+jKyXoJnTiKC

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      51b92b853b1036cddc6877845a16fc3daf0b0e860178cde0a9b0065d4cc80685

    • Size

      346KB

    • MD5

      b5438dcce47a969bb3c85da0845fd8d5

    • SHA1

      1cd09f80884274bca85879466eaf30a51c02a94f

    • SHA256

      51b92b853b1036cddc6877845a16fc3daf0b0e860178cde0a9b0065d4cc80685

    • SHA512

      58b5306701ffcdb384fb6aa6e3614221e630c1138400fdcc64855a447af7451b003cc49c6639738908ead4aac2056a8107f32806a7ac4dc94e804cd3792163df

    • SSDEEP

      6144:/kCFljS9PgGzqLHvw1t6mAOB+Rj36edykkpz5KCDn9DnjUkLzXua3viKC:/kKS9PgGim+jKyXoJnTiKC

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks