Overview

overview

10

Static

static

1

f715b16753...67.exe

windows7-x64

10

f715b16753...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f715b16753583103fdca370581a5d02360d60b8a4cedc5cb68e62d3f9c685b67

  • Size

    379KB

  • Sample

    231011-p1b9wsad78

  • MD5

    f4d48cea38606a7fd2fbcd70d8677d99

  • SHA1

    3d52ca90506b2ee11b1b8ba79d95b797281b4235

  • SHA256

    f715b16753583103fdca370581a5d02360d60b8a4cedc5cb68e62d3f9c685b67

  • SHA512

    92fbcd7cafef0e6fc0954a48953df26f473a70dcdd305efcb2a5c1abd6243e7ca727fc5b1bee01f1a13cddcce5396a6e695d3166fe9cef1e286ed0e8bed6a335

  • SSDEEP

    6144:esLcRgs3r9vIum2Tg0N63KAOUHxYZ9HfTHiwfwTn5bMg3F:esARP3r9HmeC+PbCwoR3F

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      f715b16753583103fdca370581a5d02360d60b8a4cedc5cb68e62d3f9c685b67

    • Size

      379KB

    • MD5

      f4d48cea38606a7fd2fbcd70d8677d99

    • SHA1

      3d52ca90506b2ee11b1b8ba79d95b797281b4235

    • SHA256

      f715b16753583103fdca370581a5d02360d60b8a4cedc5cb68e62d3f9c685b67

    • SHA512

      92fbcd7cafef0e6fc0954a48953df26f473a70dcdd305efcb2a5c1abd6243e7ca727fc5b1bee01f1a13cddcce5396a6e695d3166fe9cef1e286ed0e8bed6a335

    • SSDEEP

      6144:esLcRgs3r9vIum2Tg0N63KAOUHxYZ9HfTHiwfwTn5bMg3F:esARP3r9HmeC+PbCwoR3F

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks