Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11Dt1708.exe

  • Size

    276KB

  • Sample

    231113-lqhr5scd56

  • MD5

    21679d6b73d31e2578ef11a3dafd98c6

  • SHA1

    cfc5d1e54dfd0136424741f799d809bdd2e064fe

  • SHA256

    327446a3ba70b0594547bd7cb114b1e26905cb814c3dfc66bd7ddd7898d5ee87

  • SHA512

    34b8c35d7276fd0397df69a2f74877628f0148d7ae487dfadc45f774331ab570691ff9622808db77b2e6c219315395d6a51ba63769a88a0329a4569e4ee61bdf

  • SSDEEP

    6144:aKWeIhzyZNGuBTC5MLM27tRdwvCpgAG0MWA5jYu4hKH:aKWewyzpQ0MWARl4hK

Score
10/10
mysticstealer

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.43/loghub/master

Targets

    • Target

      11Dt1708.exe

    • Size

      276KB

    • MD5

      21679d6b73d31e2578ef11a3dafd98c6

    • SHA1

      cfc5d1e54dfd0136424741f799d809bdd2e064fe

    • SHA256

      327446a3ba70b0594547bd7cb114b1e26905cb814c3dfc66bd7ddd7898d5ee87

    • SHA512

      34b8c35d7276fd0397df69a2f74877628f0148d7ae487dfadc45f774331ab570691ff9622808db77b2e6c219315395d6a51ba63769a88a0329a4569e4ee61bdf

    • SSDEEP

      6144:aKWeIhzyZNGuBTC5MLM27tRdwvCpgAG0MWA5jYu4hKH:aKWewyzpQ0MWARl4hK

    Score
    10/10
    mysticstealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks