Extracted

• • Target

    19e4e574510ebc70c450efc7c86fcceebbe586f73023a565e32b7780f75c15b5

  • Size

    927KB

  • MD5

    cbae5f9680f83a68960c45b2daa763d8

  • SHA1

    428fc54e6d6c97f53fee2cbf052372f61e7fffcc

  • SHA256

    19e4e574510ebc70c450efc7c86fcceebbe586f73023a565e32b7780f75c15b5

  • SHA512

    f6b98441c3f5b2c00e03e740cd679757ab061b2d2a1ea88c5efa81c3d5008e4b5a4a8b649dca0cd73a28ecc253d0d6b5f8852a88c508f7420e83c1a6d76d2026

  • SSDEEP

    24576:eyrlSPZN3a/0FBdjbY06dqag4+jm9u5jT:trlWj/fCp

  Score

  10^/10

  mysticpersistencestealer

  • Mystic

    Mystic is an infostealer written in C++.

    stealermystic

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2