Overview

overview

10

Static

static

1

b98bb205b6...f5.exe

windows7-x64

10

b98bb205b6...f5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

  • Size

    211KB

  • Sample

    231011-ygyhfshd5v

  • MD5

    a63e4b653f500ea50b2c509d0780d008

  • SHA1

    44729c091045cb965f3fece0819c524dd7c1b342

  • SHA256

    dc7c88c521d483eb94f49b9c85ad3789375bdee5d14bb86eea6c1263fbc90f81

  • SHA512

    d79d38a0004a0d19841e5a9be795734982cca19965915d01fb7c8b7f6e455a2ec357948f6f2bf8e6ab542e8e594db258eb45f8954a57cf2550d01d6493279933

  • SSDEEP

    6144:yEv19IesX19VRtkrBQZ8zTRvaxxfruj57xG:ZsX19VaQZ8vJajfo578

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

    • Size

      380KB

    • MD5

      831f8e3ec36a98cef6c4115c66649628

    • SHA1

      e72c14e8a0fa67ee435378d5b45e6923d4445e0e

    • SHA256

      b98bb205b66ffbf22f2ef766e0235f7253b5f23bfac9e5241efb87d966f534f5

    • SHA512

      6df068ed44e0d63bee309f456b4658b76a2c866a5cdc9f1e0e57f569441a7c5014495547798c7ef277b41012be2ca23b6ddec4d7bb244ed5faf0bde641b3417e

    • SSDEEP

      6144:qlPVhHX110KwTVSf3pOCq5b6uAOSTMiI/bedZ8dHzrd4BypS4cQqwm:qlPL3110dVaUcuMThI/ydWF4BonYwm

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks