Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11tY2884.exe

  • Size

    276KB

  • Sample

    231113-lh65rsbh3v

  • MD5

    edba3d62dc68ea88ea645be58f11be88

  • SHA1

    9c131a66d6ec32af181b0479c3e90d55b2c642ba

  • SHA256

    4d5f340b7d57382d4a19355b9b375c61d5fc14418936840c051e4fddefb95830

  • SHA512

    066c53e425b5073d559cfbd2a885c7c7e9a86c7b581301729d7ec307ae7ad5a42809c75a538ee21e235f02f3a5bc1c71f260ddf2089a1732392fd37695e9aae2

  • SSDEEP

    6144:MKWeIhzyZNGu42AfYHXHYY6o5Eob1B7uj/sQ1J8wcazdKH:MKWewyQfYmgDpUjpfcapK

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11tY2884.exe

    • Size

      276KB

    • MD5

      edba3d62dc68ea88ea645be58f11be88

    • SHA1

      9c131a66d6ec32af181b0479c3e90d55b2c642ba

    • SHA256

      4d5f340b7d57382d4a19355b9b375c61d5fc14418936840c051e4fddefb95830

    • SHA512

      066c53e425b5073d559cfbd2a885c7c7e9a86c7b581301729d7ec307ae7ad5a42809c75a538ee21e235f02f3a5bc1c71f260ddf2089a1732392fd37695e9aae2

    • SSDEEP

      6144:MKWeIhzyZNGu42AfYHXHYY6o5Eob1B7uj/sQ1J8wcazdKH:MKWewyQfYmgDpUjpfcapK

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks