Extracted

• • Target

    SecuriteInfo.com.Win32.Evo-gen.16298.25169.exe

  • Size

    380KB

  • MD5

    f4a032b70f073051e3a57905025490ba

  • SHA1

    f397bb82382c468cf1a3507b1a2613313bcd0274

  • SHA256

    6f2b77f58f937a596f42f65bb7bde2b9d310c9a6b15316ef6c0573ffa2e25bbe

  • SHA512

    bc207565e86f4953e0c34a33bc8e5714716b24caea0f08c15897716f71459450f2e9d4ee070c3d7988feabe041d6f484037b1b9091543f3fa735fa9175f49110

  • SSDEEP

    6144:8lPjhHX110KwTVSf3pOCq5b6uAOQR14fq8HhbhtXUHAbjERPwJNX7SpsM/fUqwm:8lPN3110dVaUcuKfSq8Hhbx/SFwm

  Score

  10^/10

  mysticstealer

  • Detect Mystic stealer payload

  • Mystic

    Mystic is an infostealer written in C++.

    stealermystic

  • Suspicious use of SetThreadContext

  behavioral1behavioral2