General

  • Target

    11Qn8937.exe

  • Size

    276KB

  • Sample

    231113-lgy3rsbh2v

  • MD5

    886f7c985e2cb4f17b549024d11f8a98

  • SHA1

    2e24b78e7a8bb3ea49a022ee05bc61129d757b45

  • SHA256

    bab9cabbbc1d60d0ff5052af11bf8360c985f4a9f487cde022adff7fd84b5922

  • SHA512

    d219e35338a60eacf81b096304882517f21b8ed7167e7db54ce3903dab8f9905a30ee24484e5db1fa6c76654f943ba98cdf0006d80f888a5e2e755aebe6e46df

  • SSDEEP

    6144:RKWeIhzyZNGuL4EVE/XWXhsxteYnyaIOtpFhBL3aXnD2W+HW+HW+HW+x9pXKKH:RKWewyJzsxtRNjZG+2+2+2+x9NKK

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11Qn8937.exe

    • Size

      276KB

    • MD5

      886f7c985e2cb4f17b549024d11f8a98

    • SHA1

      2e24b78e7a8bb3ea49a022ee05bc61129d757b45

    • SHA256

      bab9cabbbc1d60d0ff5052af11bf8360c985f4a9f487cde022adff7fd84b5922

    • SHA512

      d219e35338a60eacf81b096304882517f21b8ed7167e7db54ce3903dab8f9905a30ee24484e5db1fa6c76654f943ba98cdf0006d80f888a5e2e755aebe6e46df

    • SSDEEP

      6144:RKWeIhzyZNGuL4EVE/XWXhsxteYnyaIOtpFhBL3aXnD2W+HW+HW+HW+x9pXKKH:RKWewyJzsxtRNjZG+2+2+2+x9NKK

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks