Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11Il0117.exe

  • Size

    283KB

  • Sample

    231113-lpv13sbh7y

  • MD5

    7cd5f80ecc3e54409922dc7fd2896848

  • SHA1

    cd6f8afa11079385f58b80e23185eee199a84b95

  • SHA256

    17c5493764b63ba22597cb565428e2d472757bab2f101fe18d04a7e34a85f6c0

  • SHA512

    2e5e990dc7aca41babc23a0c5df5bfed2f4bc344bc1a3f8192bfefe204521e67bcec56e553f3bea9305fe98e5c0db1825d3ce53ebac14da555c513148d95a361

  • SSDEEP

    6144:mab74GR3s+TA3UcT+NLa6d7LdHnuMsGkCdolmqq4b97Ud3:TbFs+E3UzLa6d9HnuJGlduWg97Ud3

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11Il0117.exe

    • Size

      283KB

    • MD5

      7cd5f80ecc3e54409922dc7fd2896848

    • SHA1

      cd6f8afa11079385f58b80e23185eee199a84b95

    • SHA256

      17c5493764b63ba22597cb565428e2d472757bab2f101fe18d04a7e34a85f6c0

    • SHA512

      2e5e990dc7aca41babc23a0c5df5bfed2f4bc344bc1a3f8192bfefe204521e67bcec56e553f3bea9305fe98e5c0db1825d3ce53ebac14da555c513148d95a361

    • SSDEEP

      6144:mab74GR3s+TA3UcT+NLa6d7LdHnuMsGkCdolmqq4b97Ud3:TbFs+E3UzLa6d9HnuJGlduWg97Ud3

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks