mercurialgrabber | Synapse_X[.]exe

General

Target
Synapse_X.exe
Size 306KB
Sample220208-ctdsxscbcn
SHA256 b329f57c93e7b566651185a55962f0ec061b723be4535bc8cafc637ca4bff86b
MD5 4b10970bc9f2471119555eed253b116b
SHA1 60598f7dbacabea6d13507023631edc32c21e305
SHA512 eed04da56031f93557c3469c5ccd2732512d78c8b5234b15277b7c2bf12e4f324ec3e41a70458aa61b85641cfb4757f128cc0896f2304f9b4e944fb66e672947
SSDEEP 1536:aA3xRyBVXL2XTTF7En368YVLNXfiQ/EWku3gN31+9OB8fq5doMgDHeES9XJ4bFO:XyBVXL8TTF7En3680Z6y3ikZSlzUF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/938829853707358228/GQ_fqwKcxJ8YNvJz6lIzbc99R2g0jdMT2WXyMUJx0ho6uumX8O1iBN9YC5VR8cJFbaNk

Signatures

Mercurialgrabber family
mercurialgrabber

File Explorer

Synapse_X.exe

.exe 306KB

Synapse_X.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b329f57c93e7b566651185a55962f0ec061b723be4535bc8cafc637ca4bff86b
MD5 4b10970bc9f2471119555eed253b116b
SHA1 60598f7dbacabea6d13507023631edc32c21e305
SHA512 eed04da56031f93557c3469c5ccd2732512d78c8b5234b15277b7c2bf12e4f324ec3e41a70458aa61b85641cfb4757f128cc0896f2304f9b4e944fb66e672947
SSDEEP 1536:aA3xRyBVXL2XTTF7En368YVLNXfiQ/EWku3gN31+9OB8fq5doMgDHeES9XJ4bFO:XyBVXL8TTF7En3680Z6y3ikZSlzUF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

48286

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing