General

  • Target

    69c9a3c1dbfb834c308625567a337962337188b30531496b7ee80ae4c2f1708f

  • Size

    283KB

  • Sample

    231112-sfsypage3y

  • MD5

    d3f9ea58934474c6d9064bbe9bd34209

  • SHA1

    0393f63d71cb41544163cb207fa1c4dc5fbec9c0

  • SHA256

    69c9a3c1dbfb834c308625567a337962337188b30531496b7ee80ae4c2f1708f

  • SHA512

    676e71d6439a4ebe7b5a69033562c08f40ecb2589f500ec97dfee4f815f9c590f2e7a832cb609cd3df6d9d0f152c3c1c210049658b11e6960f5eab784a1aebe9

  • SSDEEP

    6144:loab745RpPFYCpoylUKTsnVGW/+GqX16/MO3B7Ud3:3bARpGKTY01OR7Ud3

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      69c9a3c1dbfb834c308625567a337962337188b30531496b7ee80ae4c2f1708f

    • Size

      283KB

    • MD5

      d3f9ea58934474c6d9064bbe9bd34209

    • SHA1

      0393f63d71cb41544163cb207fa1c4dc5fbec9c0

    • SHA256

      69c9a3c1dbfb834c308625567a337962337188b30531496b7ee80ae4c2f1708f

    • SHA512

      676e71d6439a4ebe7b5a69033562c08f40ecb2589f500ec97dfee4f815f9c590f2e7a832cb609cd3df6d9d0f152c3c1c210049658b11e6960f5eab784a1aebe9

    • SSDEEP

      6144:loab745RpPFYCpoylUKTsnVGW/+GqX16/MO3B7Ud3:3bARpGKTY01OR7Ud3

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks