Overview

overview

10

Static

static

1

711bde7c76...b9.exe

windows7-x64

10

711bde7c76...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    711bde7c76b85bfafb8b6d96d9dbf73c64e3d993802aab12e8dba97a0b68b5b9

  • Size

    379KB

  • Sample

    231011-qg1c2sbb88

  • MD5

    a1db3f1900560617e51efc6fc61444ee

  • SHA1

    6fcef0e69ae96e06bce7e437b0b5536357688856

  • SHA256

    711bde7c76b85bfafb8b6d96d9dbf73c64e3d993802aab12e8dba97a0b68b5b9

  • SHA512

    8cdd36d939142847facf7c65dc35dd91eecef0b52005d13b81f7d71c26f8dfccd30f14075a210ea727011c8f8164fd157b1d1a72782fbf678decb6c8c371d678

  • SSDEEP

    6144:NpTcRgs3r9vIum2Tg0N63KAO3LPv6cum6VXkGM/Fu/iaOhQL8PCg3F:NpoRP3r9Hme1WTm6VXkGM/ILE3F

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      711bde7c76b85bfafb8b6d96d9dbf73c64e3d993802aab12e8dba97a0b68b5b9

    • Size

      379KB

    • MD5

      a1db3f1900560617e51efc6fc61444ee

    • SHA1

      6fcef0e69ae96e06bce7e437b0b5536357688856

    • SHA256

      711bde7c76b85bfafb8b6d96d9dbf73c64e3d993802aab12e8dba97a0b68b5b9

    • SHA512

      8cdd36d939142847facf7c65dc35dd91eecef0b52005d13b81f7d71c26f8dfccd30f14075a210ea727011c8f8164fd157b1d1a72782fbf678decb6c8c371d678

    • SSDEEP

      6144:NpTcRgs3r9vIum2Tg0N63KAO3LPv6cum6VXkGM/Fu/iaOhQL8PCg3F:NpoRP3r9Hme1WTm6VXkGM/ILE3F

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks