Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11eR3753.exe

  • Size

    276KB

  • Sample

    231113-lnmy3scd25

  • MD5

    63cdde39ca1956aaf5895889df3764da

  • SHA1

    b5b8a877f68b8bda37b5e5d14b69649b8c71e805

  • SHA256

    ebf9de73a31764f9b6f0db98c3173a2298f7504df6f90423fe41158b9a68ea6a

  • SHA512

    b640b2036547b84e88b8a379a18764d0a98cd3d0aeabef2d90db7db3fe1e871185437ebae9ede024e252738b187cd2c18299be277fa7ce9da2ab125ea3fc6b41

  • SSDEEP

    6144:0KWeIhzyZNGuxq2tRR6C1xeBU+VGGZAcjcA5R8Xj7KH:0KWewyC2tRR6C1ceSCcjcA5R4j7K

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11eR3753.exe

    • Size

      276KB

    • MD5

      63cdde39ca1956aaf5895889df3764da

    • SHA1

      b5b8a877f68b8bda37b5e5d14b69649b8c71e805

    • SHA256

      ebf9de73a31764f9b6f0db98c3173a2298f7504df6f90423fe41158b9a68ea6a

    • SHA512

      b640b2036547b84e88b8a379a18764d0a98cd3d0aeabef2d90db7db3fe1e871185437ebae9ede024e252738b187cd2c18299be277fa7ce9da2ab125ea3fc6b41

    • SSDEEP

      6144:0KWeIhzyZNGuxq2tRR6C1xeBU+VGGZAcjcA5R8Xj7KH:0KWewyC2tRR6C1ceSCcjcA5R4j7K

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks