General
-
Target
11Qn8937.exe
-
Size
276KB
-
Sample
231113-lgy3rsbh2v
-
MD5
886f7c985e2cb4f17b549024d11f8a98
-
SHA1
2e24b78e7a8bb3ea49a022ee05bc61129d757b45
-
SHA256
bab9cabbbc1d60d0ff5052af11bf8360c985f4a9f487cde022adff7fd84b5922
-
SHA512
d219e35338a60eacf81b096304882517f21b8ed7167e7db54ce3903dab8f9905a30ee24484e5db1fa6c76654f943ba98cdf0006d80f888a5e2e755aebe6e46df
-
SSDEEP
6144:RKWeIhzyZNGuL4EVE/XWXhsxteYnyaIOtpFhBL3aXnD2W+HW+HW+HW+x9pXKKH:RKWewyJzsxtRNjZG+2+2+2+x9NKK
Static task
static1
Behavioral task
behavioral1
Sample
11Qn8937.exe
Resource
win7-20231020-en
Malware Config
Extracted
mystic
http://5.42.92.43/loghub/master
Targets
-
-
Target
11Qn8937.exe
-
Size
276KB
-
MD5
886f7c985e2cb4f17b549024d11f8a98
-
SHA1
2e24b78e7a8bb3ea49a022ee05bc61129d757b45
-
SHA256
bab9cabbbc1d60d0ff5052af11bf8360c985f4a9f487cde022adff7fd84b5922
-
SHA512
d219e35338a60eacf81b096304882517f21b8ed7167e7db54ce3903dab8f9905a30ee24484e5db1fa6c76654f943ba98cdf0006d80f888a5e2e755aebe6e46df
-
SSDEEP
6144:RKWeIhzyZNGuL4EVE/XWXhsxteYnyaIOtpFhBL3aXnD2W+HW+HW+HW+x9pXKKH:RKWewyJzsxtRNjZG+2+2+2+x9NKK
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-