General

  • Target

    SecuriteInfo.com.Win64.PWSX-gen.21677.13565.exe

  • Size

    1.2MB

  • Sample

    241027-v7qnraxqew

  • MD5

    afa8c1e73c3d66f5e35b9bb18dfa371a

  • SHA1

    f124b5815eeb0e8e5228a7e379ce78f38958d426

  • SHA256

    07b63c04cd2b6532b892368ef2b393b6b02f9ba659265c6efb3f81a1ac5089f3

  • SHA512

    60e493e10252161e7950e133a5432ef2f6c554711fd664f0ec2836601e2e659e7b19432e5ffcad4bf5299fd4678611fa209c6a497e39de1da38ffaaaa8a6acdf

  • SSDEEP

    24576:a683nkpw/6Ds2B6yxBNkMsNkaWNJv+E5C6rEbl:aznkpVDs2nQM4kaWNJv+E5C6rEbl

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win64.PWSX-gen.21677.13565.exe

    • Size

      1.2MB

    • MD5

      afa8c1e73c3d66f5e35b9bb18dfa371a

    • SHA1

      f124b5815eeb0e8e5228a7e379ce78f38958d426

    • SHA256

      07b63c04cd2b6532b892368ef2b393b6b02f9ba659265c6efb3f81a1ac5089f3

    • SHA512

      60e493e10252161e7950e133a5432ef2f6c554711fd664f0ec2836601e2e659e7b19432e5ffcad4bf5299fd4678611fa209c6a497e39de1da38ffaaaa8a6acdf

    • SSDEEP

      24576:a683nkpw/6Ds2B6yxBNkMsNkaWNJv+E5C6rEbl:aznkpVDs2nQM4kaWNJv+E5C6rEbl

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Mystic family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks