General

  • Target

    mystic_4.bin

  • Size

    140KB

  • MD5

    1ba174d44914a8e4b670247ef8352e22

  • SHA1

    cb6cb760df8ad457595bd92f3234d8946bb72c0e

  • SHA256

    d834a9551db2db0f36b8e0b38f65a8caa134b1133ba5490359edb04679eb5db6

  • SHA512

    25549301b0c9aece49534fe69c7556fb6b9b417b7520b006e01c7ce04903581ccd99b83071cd5e1885d424aeaf80d63b4d1cf85ac510becc833f89742613a380

  • SSDEEP

    3072:K/omWSZQ70Qr4BCCDOnJ1GFEE+Ce5DSYXXc5I5mOzsLnKVJ:KhWSi0BStjs5XKVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_4.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections