Overview

overview

10

Static

static

1

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fo0484.exe

  • Size

    310KB

  • Sample

    231113-lp8xyabh8x

  • MD5

    fda8db9cb3929dcb961b9fae3b9d7173

  • SHA1

    d860a4906cc227590805b01cc7edd854a5bd012d

  • SHA256

    b5bd5b24b3f18001deeb9f76b7b084cf4ef00598aff02f9acd6602a5891ebe78

  • SHA512

    5dfacccae021ef83cce766c8d8a5fc03a098ad3230e9c35c4b6fa8d0a18e3f757303e1874086ac56f1bd8344d7d3f9e15f82a92df10c1af9d8a6c9ef0b5303e0

  • SSDEEP

    6144:VRJ4eu5tKjyBhpjgSYMzbRQVep9se9t+Hz8h9NzL:VRJ4e6npjPzmVepj9UHz8h9Nv

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      2fo0484.exe

    • Size

      310KB

    • MD5

      fda8db9cb3929dcb961b9fae3b9d7173

    • SHA1

      d860a4906cc227590805b01cc7edd854a5bd012d

    • SHA256

      b5bd5b24b3f18001deeb9f76b7b084cf4ef00598aff02f9acd6602a5891ebe78

    • SHA512

      5dfacccae021ef83cce766c8d8a5fc03a098ad3230e9c35c4b6fa8d0a18e3f757303e1874086ac56f1bd8344d7d3f9e15f82a92df10c1af9d8a6c9ef0b5303e0

    • SSDEEP

      6144:VRJ4eu5tKjyBhpjgSYMzbRQVep9se9t+Hz8h9NzL:VRJ4e6npjPzmVepj9UHz8h9Nv

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks