Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2023 09:56
Behavioral task
behavioral1
Sample
mystic_3.exe
Resource
win10v2004-20231025-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
mystic_3.exe
-
Size
140KB
-
MD5
d9e8d21e4e73c65de6fd2bdfe03b200d
-
SHA1
fa57bbe9fd8b75853cdf094ac71628f65d9cc96a
-
SHA256
9960e5aa85b8d62c322ff29ebd9cfbff638975fedffd1c288027e5e9d5743f26
-
SHA512
9ae94ad375c2290aa341642e86f48385d47bc3069053999e897790dbc09ba949e4861a11f94896d9d934cc7c6cd6674fc3fe699343163150e8e76e6c003bca7d
-
SSDEEP
3072:CD5jPRSIdgprlSk1Cy3OhAiqlNkPDkQuPwALEU5glmZzpbyKVJ:CDtRS/5d15U6/5uKVJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1692 2484 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\mystic_3.exe"C:\Users\Admin\AppData\Local\Temp\mystic_3.exe"1⤵PID:2484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 2202⤵
- Program crash
PID:1692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2484 -ip 24841⤵PID:4716