General

  • Target

    mystic_0.bin

  • Size

    140KB

  • MD5

    346e6159966a2de9c8c33f67bc2f4e6b

  • SHA1

    a45ea84ff0c4c10d3e34a6d2af67b63d181a4908

  • SHA256

    0f25abd7883b4fde66a267efdc2b81276660e4e086609f1e463eaf148a845412

  • SHA512

    41b9efd1cb9a766a8df41fb6bfad15d15da44e75d4947b6a7c89a9f01c77940533f714a1b8b11cf43fce917f5b67ce9c37d5d02c44b47a1c8739029d4c5e7def

  • SSDEEP

    3072:n8aToSf1NP4sUtCIuOoH+CesVBMHvk1AEwjem5RR/muzNb+KVJ:n/oSDyto2sk5D50KVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_0.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections