General
-
Target
2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10_JC.exe
-
Size
364KB
-
Sample
231011-rf2edscb7z
-
MD5
f8308e5f788b1a3c15dd074701afd38d
-
SHA1
f5b88a757fb18c2f1c982832374bd43c147d7f8c
-
SHA256
2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10
-
SHA512
e45ba036da450e2c128d0badfe2c3b60a9a6d5592986713fa3bf626dd6adf4542090b2de63a6c228cb6118fdc2ba1036746e3d15948e8eeb612e9280f1260607
-
SSDEEP
6144:QmXAxlt3fuPgyxhV5dAOPI4MT0diye9znjO13lPGCH:QHxltWTVI4gkwQGCH
Static task
static1
Behavioral task
behavioral1
Sample
2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
mystic
http://5.42.92.211/loghub/master
Targets
-
-
Target
2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10_JC.exe
-
Size
364KB
-
MD5
f8308e5f788b1a3c15dd074701afd38d
-
SHA1
f5b88a757fb18c2f1c982832374bd43c147d7f8c
-
SHA256
2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10
-
SHA512
e45ba036da450e2c128d0badfe2c3b60a9a6d5592986713fa3bf626dd6adf4542090b2de63a6c228cb6118fdc2ba1036746e3d15948e8eeb612e9280f1260607
-
SSDEEP
6144:QmXAxlt3fuPgyxhV5dAOPI4MT0diye9znjO13lPGCH:QHxltWTVI4gkwQGCH
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-