General

  • Target

    a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6_JC.exe

  • Size

    380KB

  • Sample

    231011-rdcm9adf86

  • MD5

    13d60409fcdd454f3d7e51969d718cb7

  • SHA1

    9664d3cd0f5aae8e4bbddc438ce2104b0a14497c

  • SHA256

    a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6

  • SHA512

    d21524dfce9f68258739ec1cb84661601c9814f3c16fb1af5504b84384a41895709f0fa29deae8386520ced414aaeb53f565da4ca79a40184e610ccfa3b68f52

  • SSDEEP

    6144:HlPMhHX110KwTVSf3pOCq5b6uAOfKGrkt/nH04D9D0iewVmIqwm:HlPS3110dVaUcutKMK/H04xDjewVmBwm

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6_JC.exe

    • Size

      380KB

    • MD5

      13d60409fcdd454f3d7e51969d718cb7

    • SHA1

      9664d3cd0f5aae8e4bbddc438ce2104b0a14497c

    • SHA256

      a7fe12ba9177d269eb1db5c0b55b3be01345e35e3e8d5ad0bc106c4aa268d6a6

    • SHA512

      d21524dfce9f68258739ec1cb84661601c9814f3c16fb1af5504b84384a41895709f0fa29deae8386520ced414aaeb53f565da4ca79a40184e610ccfa3b68f52

    • SSDEEP

      6144:HlPMhHX110KwTVSf3pOCq5b6uAOfKGrkt/nH04D9D0iewVmIqwm:HlPS3110dVaUcutKMK/H04xDjewVmBwm

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks