Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    371KB

  • Sample

    231012-s5xyyabf39

  • MD5

    25c0ef13f3b36ef0b77679850764f0ec

  • SHA1

    19fbc6fdc8300ec40134f90ad63ab2da1eb1a0ed

  • SHA256

    7d456683a069978de6b7e28e455c691a7d37d8d8b9507df86e8e9c5c0d6983b0

  • SHA512

    fe7a83a06c9fb06ef18398411bde809af433183f210e267187d9e41cd9a38d09afcc2d6f4c2bed75cc56e6e1040f79fc0fe4ef7bdd810d92f83279fc0a74d28f

  • SSDEEP

    6144:j9vJm09zORs+z/TMify9DAOBgQzEbjeAm5SimSI8/:jlw09CK5NQaACAmID8/

Score
10/10
mysticstealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      371KB

    • MD5

      25c0ef13f3b36ef0b77679850764f0ec

    • SHA1

      19fbc6fdc8300ec40134f90ad63ab2da1eb1a0ed

    • SHA256

      7d456683a069978de6b7e28e455c691a7d37d8d8b9507df86e8e9c5c0d6983b0

    • SHA512

      fe7a83a06c9fb06ef18398411bde809af433183f210e267187d9e41cd9a38d09afcc2d6f4c2bed75cc56e6e1040f79fc0fe4ef7bdd810d92f83279fc0a74d28f

    • SSDEEP

      6144:j9vJm09zORs+z/TMify9DAOBgQzEbjeAm5SimSI8/:jlw09CK5NQaACAmID8/

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks