Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11fH1661.exe

  • Size

    283KB

  • Sample

    231113-lmldvsbh5z

  • MD5

    df13b7749972374abcd0d5bac823b378

  • SHA1

    6856fbece5e2943dbb21315e980494e26bc86493

  • SHA256

    b14cf90739275fef0a5315ad19822565dff2416db610cea2fc08ea925bc959ff

  • SHA512

    93b18d02f4d8ab7974db06173e05741c9345ee2d6e0ba6d8d59e365a6b49ee5ea5d8794f6626eedccfd32a9d387724daf289bab4421060e0e032aac65416195b

  • SSDEEP

    6144:Yc/Lo8W8B2GWUEM8Fq4q1G3wbgMvZTbshg7xvMnB7Ud3:P/pdWNFqj1G3wbgMvZTbggynB7Ud3

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11fH1661.exe

    • Size

      283KB

    • MD5

      df13b7749972374abcd0d5bac823b378

    • SHA1

      6856fbece5e2943dbb21315e980494e26bc86493

    • SHA256

      b14cf90739275fef0a5315ad19822565dff2416db610cea2fc08ea925bc959ff

    • SHA512

      93b18d02f4d8ab7974db06173e05741c9345ee2d6e0ba6d8d59e365a6b49ee5ea5d8794f6626eedccfd32a9d387724daf289bab4421060e0e032aac65416195b

    • SSDEEP

      6144:Yc/Lo8W8B2GWUEM8Fq4q1G3wbgMvZTbshg7xvMnB7Ud3:P/pdWNFqj1G3wbgMvZTbggynB7Ud3

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks