Overview

overview

10

Static

static

1

16e36ae998...c4.exe

windows7-x64

10

16e36ae998...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16e36ae9985d4d513510b2af45f9a1d1376e2d8bb3bc60c19a4cdf3e142832c4

  • Size

    379KB

  • Sample

    231011-p84dcaah24

  • MD5

    80340c32fb1064004ecd02bf07e9f1c6

  • SHA1

    b9181ae34632384351b3a15835ec9a28e1bf784d

  • SHA256

    16e36ae9985d4d513510b2af45f9a1d1376e2d8bb3bc60c19a4cdf3e142832c4

  • SHA512

    622b190fa3ff56b4f7d64945eb9aab4f83af7acc0dcce0ac09f934ad1d24e453b9046dc9228f2c9e7d5b2e02fd6e66d9ff68fa95628aed47fd923af9690745c7

  • SSDEEP

    6144:kZvcRgs3r9vIum2Tg0N63KAO2Lxmx+rUwRBq89D6d6hWdg3F:kZkRP3r9Hme0L2fwRM89NWS3F

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      16e36ae9985d4d513510b2af45f9a1d1376e2d8bb3bc60c19a4cdf3e142832c4

    • Size

      379KB

    • MD5

      80340c32fb1064004ecd02bf07e9f1c6

    • SHA1

      b9181ae34632384351b3a15835ec9a28e1bf784d

    • SHA256

      16e36ae9985d4d513510b2af45f9a1d1376e2d8bb3bc60c19a4cdf3e142832c4

    • SHA512

      622b190fa3ff56b4f7d64945eb9aab4f83af7acc0dcce0ac09f934ad1d24e453b9046dc9228f2c9e7d5b2e02fd6e66d9ff68fa95628aed47fd923af9690745c7

    • SSDEEP

      6144:kZvcRgs3r9vIum2Tg0N63KAO2Lxmx+rUwRBq89D6d6hWdg3F:kZkRP3r9Hme0L2fwRM89NWS3F

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks