General

  • Target

    SecuriteInfo.com.Trojan.KillProc2.21513.13921.6659.exe

  • Size

    364KB

  • Sample

    231012-atf7yadd9v

  • MD5

    bc9e628e3ace1024cc79f1b2da9963a0

  • SHA1

    fe859951cd2ca2f21ad0cd30a622af0a087c3906

  • SHA256

    1d4d7c1afdb5e830b264b293b477c0a74768b4b9e8291d6e671d943c565f2409

  • SHA512

    bbdd884f1c165733cc3f06479c166636a5e183ca0dbdf44a1a9e1452b506422549ba1cc9c205c9e9e9a5e7f1ec4f94da3f561e87469a23a8e0ceb4b8cdc0e48b

  • SSDEEP

    6144:1r46fuYXChoQTjlFgLuCY1dRuAOpeEphBIMMIpHrJNbjRxLFaq1hkvw8y0:10YzXChdTbv1buPph4+HrJNbjRxJGvwX

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      SecuriteInfo.com.Trojan.KillProc2.21513.13921.6659.exe

    • Size

      364KB

    • MD5

      bc9e628e3ace1024cc79f1b2da9963a0

    • SHA1

      fe859951cd2ca2f21ad0cd30a622af0a087c3906

    • SHA256

      1d4d7c1afdb5e830b264b293b477c0a74768b4b9e8291d6e671d943c565f2409

    • SHA512

      bbdd884f1c165733cc3f06479c166636a5e183ca0dbdf44a1a9e1452b506422549ba1cc9c205c9e9e9a5e7f1ec4f94da3f561e87469a23a8e0ceb4b8cdc0e48b

    • SSDEEP

      6144:1r46fuYXChoQTjlFgLuCY1dRuAOpeEphBIMMIpHrJNbjRxLFaq1hkvw8y0:10YzXChdTbv1buPph4+HrJNbjRxJGvwX

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks