General

  • Target

    mystic_3.bin

  • Size

    140KB

  • MD5

    d9e8d21e4e73c65de6fd2bdfe03b200d

  • SHA1

    fa57bbe9fd8b75853cdf094ac71628f65d9cc96a

  • SHA256

    9960e5aa85b8d62c322ff29ebd9cfbff638975fedffd1c288027e5e9d5743f26

  • SHA512

    9ae94ad375c2290aa341642e86f48385d47bc3069053999e897790dbc09ba949e4861a11f94896d9d934cc7c6cd6674fc3fe699343163150e8e76e6c003bca7d

  • SSDEEP

    3072:CD5jPRSIdgprlSk1Cy3OhAiqlNkPDkQuPwALEU5glmZzpbyKVJ:CDtRS/5d15U6/5uKVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_3.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections