Overview

overview

10

Static

static

1

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2PZ1181.exe

  • Size

    310KB

  • Sample

    231113-lp3e6abh8s

  • MD5

    8e2f0a5d1308ab1b7497bf578a669a2d

  • SHA1

    bb92856fd0bee94a830bbd70f564ec94b5502bcd

  • SHA256

    eb89d62ad97d191a663e7839fde1e5ea5b7df92861ad3a7f9650f5715e54ff74

  • SHA512

    75b10b0d965fdeb845273fc601176bf61e0c36b880c691fc5f20dec5f3263b6c72ca0075696fb46c9f5db8e776aab457ab3df08fd1536d53541de16e92303889

  • SSDEEP

    6144:kRJ4eu5tKp9NaKalKcdvu+mH6GvF+9rQKuAsezd4j0dkKh9NzL:kRJ4ezGlKqvuddvFtA32Kh9Nv

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      2PZ1181.exe

    • Size

      310KB

    • MD5

      8e2f0a5d1308ab1b7497bf578a669a2d

    • SHA1

      bb92856fd0bee94a830bbd70f564ec94b5502bcd

    • SHA256

      eb89d62ad97d191a663e7839fde1e5ea5b7df92861ad3a7f9650f5715e54ff74

    • SHA512

      75b10b0d965fdeb845273fc601176bf61e0c36b880c691fc5f20dec5f3263b6c72ca0075696fb46c9f5db8e776aab457ab3df08fd1536d53541de16e92303889

    • SSDEEP

      6144:kRJ4eu5tKp9NaKalKcdvu+mH6GvF+9rQKuAsezd4j0dkKh9NzL:kRJ4ezGlKqvuddvFtA32Kh9Nv

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks