General

  • Target

    mystic_5.bin

  • Size

    140KB

  • MD5

    c60f177bdad502fa264f7bc57af17411

  • SHA1

    e3b57bf0d9455db81460fae8f5fe60b97c6e9ae7

  • SHA256

    e59b04adba48e393f70f266963502d0874ab4922d82771d34201c5437f13fa1d

  • SHA512

    7c2ec5eb0dc2974d8e20ff2db75971507444caa5a48b5a0aa111dae22827df876db5462fde8ed5f0dbc5187b79b9b6ad39af3278738cbe678f0cf3cf31503bda

  • SSDEEP

    3072:ivchksRoSdkHJQGOcOPGNiLtgCTwuOh3XtQOIlyuKEDgSTF5Ja27FsQe4m/zuDdm:ivyoSJGOcOPGNAtgmoIJB5VKVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_5.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections