General

  • Target

    2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10_JC.exe

  • Size

    364KB

  • Sample

    231011-rf2edscb7z

  • MD5

    f8308e5f788b1a3c15dd074701afd38d

  • SHA1

    f5b88a757fb18c2f1c982832374bd43c147d7f8c

  • SHA256

    2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10

  • SHA512

    e45ba036da450e2c128d0badfe2c3b60a9a6d5592986713fa3bf626dd6adf4542090b2de63a6c228cb6118fdc2ba1036746e3d15948e8eeb612e9280f1260607

  • SSDEEP

    6144:QmXAxlt3fuPgyxhV5dAOPI4MT0diye9znjO13lPGCH:QHxltWTVI4gkwQGCH

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10_JC.exe

    • Size

      364KB

    • MD5

      f8308e5f788b1a3c15dd074701afd38d

    • SHA1

      f5b88a757fb18c2f1c982832374bd43c147d7f8c

    • SHA256

      2af4ea45dd4470da2228add550f5ef2dcb4a8c4bc5808d15e6c09e4c7c140e10

    • SHA512

      e45ba036da450e2c128d0badfe2c3b60a9a6d5592986713fa3bf626dd6adf4542090b2de63a6c228cb6118fdc2ba1036746e3d15948e8eeb612e9280f1260607

    • SSDEEP

      6144:QmXAxlt3fuPgyxhV5dAOPI4MT0diye9znjO13lPGCH:QHxltWTVI4gkwQGCH

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks