Overview

overview

10

Static

static

1

07b63c04cd...f3.exe

windows7-x64

10

07b63c04cd...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afa8c1e73c3d66f5e35b9bb18dfa371a.bin

  • Size

    500KB

  • Sample

    241029-b22paasbjf

  • MD5

    4c1f3277bd11999eaa1e73df3289b82a

  • SHA1

    e65b2b589975a1b972dcfa8df5f6490918f7fe28

  • SHA256

    158f241f1bc669c4d687cee3818844b9aab1b19dd252cb463f4f408fcabda355

  • SHA512

    3776ac8de089b4aaa5c95751b09dad95c82d23494d442239e7d12ac8731203eae54904f745ffdcac153c1e14ad39f0bf49b61832a3aa34806cd5e3fbe3f4204c

  • SSDEEP

    12288:6W+wrkzeuw4IjawVltAXhPjMyum0Y77y4Ux5cPKY8QR6o8nf:6W+waw5jawVDAX2tm0u24+cm3f

Score
10/10
mysticdiscoverystealer

Malware Config

Targets

    • Target

      07b63c04cd2b6532b892368ef2b393b6b02f9ba659265c6efb3f81a1ac5089f3.exe

    • Size

      1.2MB

    • MD5

      afa8c1e73c3d66f5e35b9bb18dfa371a

    • SHA1

      f124b5815eeb0e8e5228a7e379ce78f38958d426

    • SHA256

      07b63c04cd2b6532b892368ef2b393b6b02f9ba659265c6efb3f81a1ac5089f3

    • SHA512

      60e493e10252161e7950e133a5432ef2f6c554711fd664f0ec2836601e2e659e7b19432e5ffcad4bf5299fd4678611fa209c6a497e39de1da38ffaaaa8a6acdf

    • SSDEEP

      24576:a683nkpw/6Ds2B6yxBNkMsNkaWNJv+E5C6rEbl:aznkpVDs2nQM4kaWNJv+E5C6rEbl

    Score
    10/10
    mysticdiscoverystealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Mystic family

      mystic

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks