General

  • Target

    mystic_8.bin

  • Size

    140KB

  • MD5

    ad7f492a07e2b75855d84678e6e24fc0

  • SHA1

    66bc68511c089294f3e0ab643c9840ad3284a3db

  • SHA256

    bf38a3699ab2072dea806ff2ee3e54fca4abfa983be9cbb207c3ae8e65095364

  • SHA512

    a0515c71f291c82dd49f081d1f35c4f4801694a06c932ec0273961212eb19b2cf9a05844794d8cb6709bc13482d28269c739ccd3e119a37de3b8ab3b73925c00

  • SSDEEP

    3072:/3A8KZSuCoIO/pLS0CvFOdVBf2FwUZWUE9wpDV+hb5sPmZzPvaKVJ:/kZSiO0pBE+55CKVJ

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://193.233.254.61/

Signatures

  • Detect Mystic stealer payload 1 IoCs
  • Mystic family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mystic_8.bin
    .exe windows:5 windows x86

    0139538a651a21148db92c7ae213c5f3


    Headers

    Imports

    Sections