General

  • Target

    NEAS.1e4f2815798f04f641a4246161a4ccd0.exe

  • Size

    1.6MB

  • Sample

    231117-ernlfseg62

  • MD5

    1e4f2815798f04f641a4246161a4ccd0

  • SHA1

    74e945ce3206bd201bf4e1a1f58fca95bc849bba

  • SHA256

    9eeb6e327713d5987d5491c8c1ec2a5afce3238602add44775430fb46333d36b

  • SHA512

    f05d696d08957925bde221a15704dee3cee948d6e2e19af94adacf7867b8a32fc188242d918f562cbeaf59bc299d67f8f2a7fb483b8eff792fbeb399b98af33a

  • SSDEEP

    24576:HH183mnLjwI6vbR6a9DhvhZ5s+DSYJnJ4fQyDOggh:HV4inkTR6a3v9bDZnufQyDOlh

Score
10/10

Malware Config

Targets

    • Target

      NEAS.1e4f2815798f04f641a4246161a4ccd0.exe

    • Size

      1.6MB

    • MD5

      1e4f2815798f04f641a4246161a4ccd0

    • SHA1

      74e945ce3206bd201bf4e1a1f58fca95bc849bba

    • SHA256

      9eeb6e327713d5987d5491c8c1ec2a5afce3238602add44775430fb46333d36b

    • SHA512

      f05d696d08957925bde221a15704dee3cee948d6e2e19af94adacf7867b8a32fc188242d918f562cbeaf59bc299d67f8f2a7fb483b8eff792fbeb399b98af33a

    • SSDEEP

      24576:HH183mnLjwI6vbR6a9DhvhZ5s+DSYJnJ4fQyDOggh:HV4inkTR6a3v9bDZnufQyDOlh

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks