General

  • Target

    mystic_2.bin

  • Size

    140KB

  • MD5

    0f898ba5659558d17e77a0918cb683c7

  • SHA1

    8da25472adc53c0c22d56735fce13049166fd6f7

  • SHA256

    0326eb043f804b7930c136027f9e5c0244891d1501ad13a80da06548c2e1a3d9

  • SHA512

    5679d695ea47184eab48728a19f1c45f4bbb62ab232de4c1e1b3ebe46c8b333e0584dd57be05037083569d632d56c9a20044f18e1fd52a0c06b0f6ebcf00ff33

  • SSDEEP

    3072:XcypASCRUNAPjZNCpEWeOYfWyNpsXHYBdgcQr6G5xVmmzFbWKVJ:XVASYd9NOgERX5cKVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_2.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections