Analysis
-
max time kernel
136s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2023 09:56
Behavioral task
behavioral1
Sample
mystic_2.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
mystic_2.exe
-
Size
140KB
-
MD5
0f898ba5659558d17e77a0918cb683c7
-
SHA1
8da25472adc53c0c22d56735fce13049166fd6f7
-
SHA256
0326eb043f804b7930c136027f9e5c0244891d1501ad13a80da06548c2e1a3d9
-
SHA512
5679d695ea47184eab48728a19f1c45f4bbb62ab232de4c1e1b3ebe46c8b333e0584dd57be05037083569d632d56c9a20044f18e1fd52a0c06b0f6ebcf00ff33
-
SSDEEP
3072:XcypASCRUNAPjZNCpEWeOYfWyNpsXHYBdgcQr6G5xVmmzFbWKVJ:XVASYd9NOgERX5cKVJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5068 3684 WerFault.exe 41
Processes
-
C:\Users\Admin\AppData\Local\Temp\mystic_2.exe"C:\Users\Admin\AppData\Local\Temp\mystic_2.exe"1⤵PID:3684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3684 -s 2242⤵
- Program crash
PID:5068
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3684 -ip 36841⤵PID:3724