Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11Nc2625.exe

  • Size

    283KB

  • Sample

    231113-ll6y6scc92

  • MD5

    a5a72317c8edf1f614090e2821caa402

  • SHA1

    541348e1edf2f7f26e4f1744fe1f31166e3e3e46

  • SHA256

    51b049325e743d3d967ff456d330d49237fe530279e70a41cefd4b2772f17706

  • SHA512

    d8f63480b22c94af43fca7b6f6ff17fb6be42f845771efb944b907e26a06f55fd284882003557f5aea61e9e1145050965903085ff0d6369ed77eadd06fbd12cd

  • SSDEEP

    6144:Zab74vR70tWwD3h8pkuc6RzRQZ9cP+uC7Ud3:Ib4wDR8p3c6x2Z9cP+t7Ud3

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11Nc2625.exe

    • Size

      283KB

    • MD5

      a5a72317c8edf1f614090e2821caa402

    • SHA1

      541348e1edf2f7f26e4f1744fe1f31166e3e3e46

    • SHA256

      51b049325e743d3d967ff456d330d49237fe530279e70a41cefd4b2772f17706

    • SHA512

      d8f63480b22c94af43fca7b6f6ff17fb6be42f845771efb944b907e26a06f55fd284882003557f5aea61e9e1145050965903085ff0d6369ed77eadd06fbd12cd

    • SSDEEP

      6144:Zab74vR70tWwD3h8pkuc6RzRQZ9cP+uC7Ud3:Ib4wDR8p3c6x2Z9cP+t7Ud3

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks