General
-
Target
SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
-
Size
1.1MB
-
Sample
231219-ral3hscgb3
-
MD5
63e139e6777408781e81a119d8162f1f
-
SHA1
0d5906860a90d6f2bd74c83cdc3441fb6127c658
-
SHA256
d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a
-
SHA512
588710ba5b110c26f8ec47d5f7e08da727d62888809468d0d45208aff6988277a74f08cb0b26034e1ea01bcf3e0ac8cfc62f30225972c5d0a5a4c18aac19718d
-
SSDEEP
24576:HnMFp4xeIzuj3nEG8jaZ5AUPc0Bmew+nK:sFIzuj3nbZFc0wexnK
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
Resource
win7-20231215-en
Malware Config
Extracted
mystic
http://5.42.92.211/
Targets
-
-
Target
SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
-
Size
1.1MB
-
MD5
63e139e6777408781e81a119d8162f1f
-
SHA1
0d5906860a90d6f2bd74c83cdc3441fb6127c658
-
SHA256
d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a
-
SHA512
588710ba5b110c26f8ec47d5f7e08da727d62888809468d0d45208aff6988277a74f08cb0b26034e1ea01bcf3e0ac8cfc62f30225972c5d0a5a4c18aac19718d
-
SSDEEP
24576:HnMFp4xeIzuj3nEG8jaZ5AUPc0Bmew+nK:sFIzuj3nbZFc0wexnK
-
Detect Mystic stealer payload
-
Suspicious use of SetThreadContext
-