General

  • Target

    mystic_1.bin

  • Size

    140KB

  • MD5

    dd4d249c455c2ce176cd52ffedb2b8f6

  • SHA1

    dc13a57ee738055aff2fa7030882863e8325e513

  • SHA256

    57b5d8f8ac46c06e4557306f1695d84ac69abd4fe0c7483c0f629c759a19af84

  • SHA512

    c576f5d86d52140111c77619a14ff93e1fd0aa06f6250ada28c860f63d14405c03f1663e2915db4c1c47a3964ab54f21f3d938a4af8b34cebf5532661ef1823d

  • SSDEEP

    3072:QLvCp1QSEExG28kjCOVvOXiIg9gIXDUxhgdhz3JMXIPlehsccY5+D5cYytgtIplI:QLGQS5ljxUiIqgIXDS+3G6lehzcJD5c6

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_1.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections