General

  • Target

    58c2e7a55e59bbac22646f7e3e6436da1ba53d0540b3836a0ca8716b491b4d2f

  • Size

    700KB

  • Sample

    231012-gt8qhsbd71

  • MD5

    d7c47fb963c65bc517512b54cb5e5e6d

  • SHA1

    2dee04c2b7df6404a40a18c70d7e9e5266bc0e86

  • SHA256

    58c2e7a55e59bbac22646f7e3e6436da1ba53d0540b3836a0ca8716b491b4d2f

  • SHA512

    367fc1d3a65cdde75d70cec03a759a28ac82447e67ab00f16c0124dcc0a8c34505919382cadddd4c0ab2ff73c7bbbfaca655c9892af35f99c4bc4155a26f7f83

  • SSDEEP

    6144:Y6vPALOgBE8y8wl5zNci/6VucQZFz6O990yu8VZxRJvhWav+8n6gwaPKn6B8Vsr:pgOgxyKVucQZcS9xdZxjZWpgwaM63r

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      58c2e7a55e59bbac22646f7e3e6436da1ba53d0540b3836a0ca8716b491b4d2f

    • Size

      700KB

    • MD5

      d7c47fb963c65bc517512b54cb5e5e6d

    • SHA1

      2dee04c2b7df6404a40a18c70d7e9e5266bc0e86

    • SHA256

      58c2e7a55e59bbac22646f7e3e6436da1ba53d0540b3836a0ca8716b491b4d2f

    • SHA512

      367fc1d3a65cdde75d70cec03a759a28ac82447e67ab00f16c0124dcc0a8c34505919382cadddd4c0ab2ff73c7bbbfaca655c9892af35f99c4bc4155a26f7f83

    • SSDEEP

      6144:Y6vPALOgBE8y8wl5zNci/6VucQZFz6O990yu8VZxRJvhWav+8n6gwaPKn6B8Vsr:pgOgxyKVucQZcS9xdZxjZWpgwaM63r

    Score
    10/10
    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks