General
-
Target
a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6_JC.exe
-
Size
380KB
-
Sample
231011-rdcm9adf86
-
MD5
13d60409fcdd454f3d7e51969d718cb7
-
SHA1
9664d3cd0f5aae8e4bbddc438ce2104b0a14497c
-
SHA256
a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6
-
SHA512
d21524dfce9f68258739ec1cb84661601c9814f3c16fb1af5504b84384a41895709f0fa29deae8386520ced414aaeb53f565da4ca79a40184e610ccfa3b68f52
-
SSDEEP
6144:HlPMhHX110KwTVSf3pOCq5b6uAOfKGrkt/nH04D9D0iewVmIqwm:HlPS3110dVaUcutKMK/H04xDjewVmBwm
Static task
static1
Behavioral task
behavioral1
Sample
a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
mystic
http://5.42.92.211/loghub/master
Targets
-
-
Target
a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6_JC.exe
-
Size
380KB
-
MD5
13d60409fcdd454f3d7e51969d718cb7
-
SHA1
9664d3cd0f5aae8e4bbddc438ce2104b0a14497c
-
SHA256
a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6
-
SHA512
d21524dfce9f68258739ec1cb84661601c9814f3c16fb1af5504b84384a41895709f0fa29deae8386520ced414aaeb53f565da4ca79a40184e610ccfa3b68f52
-
SSDEEP
6144:HlPMhHX110KwTVSf3pOCq5b6uAOfKGrkt/nH04D9D0iewVmIqwm:HlPS3110dVaUcutKMK/H04xDjewVmBwm
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-