Overview

overview

10

Static

static

1

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2HF4898.exe

  • Size

    310KB

  • Sample

    231113-lqck5abh81

  • MD5

    349717492a6edc15b6aed90588419adb

  • SHA1

    35560e0a83b5ce2738d7202fdc6677a7ca9238e3

  • SHA256

    faca33bfd08bd7926cb6bb3c5a88f9fd250ccc9886a75e5ee20260873fa6a857

  • SHA512

    c88921738a5dc261d37ced4eaeff4478f2c7ee1b61f1c481efa7f27930c17372ca6ae727126a88e0f715733793c84f24a5566d9d5b7347f0fe8eaa1e3c4faed6

  • SSDEEP

    6144:CRJ4eu5tKi68YI818at26Al3kt/vTP/atmfVQc1zEpQ+2vCUT0GeYzh9NzL:CRJ4e3898188Ed6jGmfCc1zEb2Ke0GeG

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      2HF4898.exe

    • Size

      310KB

    • MD5

      349717492a6edc15b6aed90588419adb

    • SHA1

      35560e0a83b5ce2738d7202fdc6677a7ca9238e3

    • SHA256

      faca33bfd08bd7926cb6bb3c5a88f9fd250ccc9886a75e5ee20260873fa6a857

    • SHA512

      c88921738a5dc261d37ced4eaeff4478f2c7ee1b61f1c481efa7f27930c17372ca6ae727126a88e0f715733793c84f24a5566d9d5b7347f0fe8eaa1e3c4faed6

    • SSDEEP

      6144:CRJ4eu5tKi68YI818at26Al3kt/vTP/atmfVQc1zEpQ+2vCUT0GeYzh9NzL:CRJ4e3898188Ed6jGmfCc1zEb2Ke0GeG

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks