mercurialgrabber | 62[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

62.exe

windows7-x64

62.exe

windows10-2004-x64

Sharing

Static task

static1

mercurialgrabber

1 signatures

Behavioral task

behavioral1

Sample

62.exe

Resource

win7-20220718-en

mercurialgrabber evasion spyware stealer

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

62.exe

Resource

win10v2004-20220721-en

mercurialgrabber evasion spyware stealer

windows10-2004-x64

12 signatures

150 seconds

General

Target

62.exe
Size

41KB
MD5

0f289c574cf2946e3fd84ba061425bfe
SHA1

340d5f331ac0e4683facc3bf117d0472fe2cff10
SHA256

6201925f8700ecc0c8f00027abb04aead349f32c740dbfdbc05a4e591611fd0a
SHA512

e1224b72519e58058d8ff4ba635fae7e44dc6353d8617700af87f467c9a7aba080eeccc43817bff179c3453b3d908ee84c4cc19ee726bbf6ad66cdc549db9753
SSDEEP

768:yscaIyIVIr27prZ7qLwnuZ5e9WTjVKZKfgm3EhKD:hc1LIr2W5e9WTRF7EED

Score

10^/10

mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1004625930397941760/YNH_Jgj9nhV8oe0r-7dvWyBtDo1Q7cL3hfYJBCnjxIdcMjhI7nRRSZGvHYRF-gZSxZ8U

Signatures

Mercurialgrabber family
mercurialgrabber

Files

62.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy