Extracted

• • Target

    fc36f636ff0464e83f53b2afb6e28e7c22c548eeb131e79d99a18ad5bdf079ac

  • Size

    929KB

  • MD5

    f7fdef3f38a76ea2433dc688dda3056c

  • SHA1

    2c872bab0a07fca14bf25d6197c3987689eb9938

  • SHA256

    fc36f636ff0464e83f53b2afb6e28e7c22c548eeb131e79d99a18ad5bdf079ac

  • SHA512

    3fbaf82ec0e67ce6627a664bc61b3e50fba71d5e165eaf90cc24638cc7213c35db419618457a4914ffc3ee60684e1a09cc0d303553b9bb1772eddd0ee71ccd85

  • SSDEEP

    24576:zyFeZZDEgT5ZZugbM9X8h6heK8VePPuRik9:GFejEy5/dMK6hblPmR

  Score

  10^/10

  mysticpersistencestealer

  • Mystic

    Mystic is an infostealer written in C++.

    stealermystic

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2