General

  • Target

    d5d17d242caf0a8a9cfb2d689bad1ca0_exe32.exe

  • Size

    380KB

  • Sample

    231015-yhplyafe2s

  • MD5

    d5d17d242caf0a8a9cfb2d689bad1ca0

  • SHA1

    bfdd04334e9cbcd095b7186e3f44510c6d4767b6

  • SHA256

    852c2fb0f8bf18beb7c2bdbe8002981274ad04eeb157917a9a3595e8e1fba20d

  • SHA512

    2d612d3fbc2753dadb7126d5744c061a5862775ef3dfc54ba924dd56678672617e25696679f2821e831873fa1135fcbe097e9133cfeea0a88f2ab062f86ebf34

  • SSDEEP

    6144:IlPiscA+110KwTVSf3pOCq5btuAOIF2wwgjDTGPwojE0+SzeeGwm:IlPifh110dVaUzuC0lgjDqw6e/wm

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      d5d17d242caf0a8a9cfb2d689bad1ca0_exe32.exe

    • Size

      380KB

    • MD5

      d5d17d242caf0a8a9cfb2d689bad1ca0

    • SHA1

      bfdd04334e9cbcd095b7186e3f44510c6d4767b6

    • SHA256

      852c2fb0f8bf18beb7c2bdbe8002981274ad04eeb157917a9a3595e8e1fba20d

    • SHA512

      2d612d3fbc2753dadb7126d5744c061a5862775ef3dfc54ba924dd56678672617e25696679f2821e831873fa1135fcbe097e9133cfeea0a88f2ab062f86ebf34

    • SSDEEP

      6144:IlPiscA+110KwTVSf3pOCq5btuAOIF2wwgjDTGPwojE0+SzeeGwm:IlPifh110dVaUzuC0lgjDqw6e/wm

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks