Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11or5678.exe

  • Size

    276KB

  • Sample

    231113-lgskzsbg9y

  • MD5

    3e39720bda10dbb894b99a4aef9d57a4

  • SHA1

    4f0044c9d40096f13714dd47ef4d5a41132a88ce

  • SHA256

    91e9fea87e0dcd09477cca6655fc7c0e9c69dcd78db17ce71978baac81c11114

  • SHA512

    fb5d9f7796a185d40fb842531e30eceb4d7ef7ee9ccd538fd33e86249dff80d9441ad73631cf62ab27e6dccc95eff9caa8dcc0885519ccfa0631582e3a88cf7c

  • SSDEEP

    6144:QKWeIhzyZNGuA4d5dikcydcaxbLRDlxLrtdqmA2WrpKH:QKWewyLd5diktdR1LdlxLRdqH2WNK

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11or5678.exe

    • Size

      276KB

    • MD5

      3e39720bda10dbb894b99a4aef9d57a4

    • SHA1

      4f0044c9d40096f13714dd47ef4d5a41132a88ce

    • SHA256

      91e9fea87e0dcd09477cca6655fc7c0e9c69dcd78db17ce71978baac81c11114

    • SHA512

      fb5d9f7796a185d40fb842531e30eceb4d7ef7ee9ccd538fd33e86249dff80d9441ad73631cf62ab27e6dccc95eff9caa8dcc0885519ccfa0631582e3a88cf7c

    • SSDEEP

      6144:QKWeIhzyZNGuA4d5dikcydcaxbLRDlxLrtdqmA2WrpKH:QKWewyLd5diktdR1LdlxLRdqH2WNK

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks