Mystic Release[.]rar | Triage

Resubmissions

25/06/2024, 13:49

240625-q4sxgstcpc 10

Sharing

Copy URL Twitter E-mail

General

Target

Mystic Release.rar
Size

37.9MB
MD5

29012d69065e9e345e589db37368d8e3
SHA1

5a83d9ae2478486eb0d1278c0da7d615ecd3cf64
SHA256

b8e050bfd5ac58c6f0c0fe2ca1cef4e4e9c1fb8099c73c84269cc6290240765e
SHA512

64f6a98195b1f34183f0dbe5a3d9c384805a1978d52a10ad9b4ca32a452cca35682b4ade91cb8d9666e16577f2e464b09345a1a46e8d8530e79d3a5e580db9f1
SSDEEP

786432:tioOWnPIMBvKW9RJjI1dC8OYRvc76kxhcVt/vRP:taW/RPJE1dC36oh6tF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mystic Release/Mystic Release V1.2.exe

Files

Mystic Release.rar
.rar
Mystic Release/ByfronHook.dll
Mystic Release/Mystic Release V1.2.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37.9MB - Virtual size: 37.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mystic Release/assets.dll
Mystic Release/bin/autoattach.dll
Mystic Release/instructions.txt
Mystic Release/license.txt
Mystic Release/workspace/Saved Scripts.txt