Overview

overview

10

Static

static

1

g1922773.exe

windows7-x64

10

g1922773.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    g1922773.exe

  • Size

    380KB

  • Sample

    231011-y7z4zadd69

  • MD5

    db379c6dc105efb8e9cab0ce9dbcabcb

  • SHA1

    2db15ba397d4446ab10f3e2c10f40b392c7102d3

  • SHA256

    4379dad75ad2b90064e521210188148237a4cbf61b24b8b0ee75e11fe27fadec

  • SHA512

    816b979881dc2e1cf4940b88d75a4705fa69b905f99562dba97e5b96a7909b6548d958ce20d71779d15d5d31d2903c46cf07decfa46819ce63cd44bfa0c1d0f1

  • SSDEEP

    6144:0lPchHX110KwTVSf3pOCq5b6uAOQ5Q33LoEKTNoUcFqwm:0lPi3110dVaUcu6+kRWowm

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      g1922773.exe

    • Size

      380KB

    • MD5

      db379c6dc105efb8e9cab0ce9dbcabcb

    • SHA1

      2db15ba397d4446ab10f3e2c10f40b392c7102d3

    • SHA256

      4379dad75ad2b90064e521210188148237a4cbf61b24b8b0ee75e11fe27fadec

    • SHA512

      816b979881dc2e1cf4940b88d75a4705fa69b905f99562dba97e5b96a7909b6548d958ce20d71779d15d5d31d2903c46cf07decfa46819ce63cd44bfa0c1d0f1

    • SSDEEP

      6144:0lPchHX110KwTVSf3pOCq5b6uAOQ5Q33LoEKTNoUcFqwm:0lPi3110dVaUcu6+kRWowm

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks