Overview

overview

10

Static

static

1

e60e1866e9...20.exe

windows7-x64

10

e60e1866e9...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e60e1866e98b8edb20ad965708d9a3143d562624de11d701892f7d3efdd47b20

  • Size

    211KB

  • Sample

    231011-yjjgbabc29

  • MD5

    b4e8a567dfa9a880e1a284e7cdf80540

  • SHA1

    1513dd21266420036a6f39f928e8e4af48906bbd

  • SHA256

    1f701be5d216cb6f69a2d96bb6eb824dbf4bf3747e64ba9bcc8b56725acc650d

  • SHA512

    6e3f537daf83680308d0483eade0c4b05c41b277f8b879acf52f516b793a944e8e1e28498e6df3d9743761c92754153de6cd5645350081374865a02fcc74e8a6

  • SSDEEP

    6144:/yqGDaYqLC3HPSSNev+pFmyaLiklPFGr0XhoszJSUz:qyLC3HKeE+YuQXGGJ3

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      e60e1866e98b8edb20ad965708d9a3143d562624de11d701892f7d3efdd47b20

    • Size

      380KB

    • MD5

      051c4f3ecc2f7834c81415816bba81fa

    • SHA1

      b2bbf9220d2cbacdf8b3b1451374ecf674631c5b

    • SHA256

      e60e1866e98b8edb20ad965708d9a3143d562624de11d701892f7d3efdd47b20

    • SHA512

      030777e38e41552f99647430e3a0dbc775fe7c5c6fa5fa780e176cd4eb2920bc9c431d4f3c6d89882154e85bc6f9817f96e55e5156f6e6cb906d86e71a3c03dc

    • SSDEEP

      6144:jlP4hHX110KwTVSf3pOCq5b6uAO/ZiaXUoTlCSBP709iwCVWqwm:jlPe3110dVaUcuhJXUoTlCAIiwC1wm

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks