Overview
overview
10Static
static
10Mercurial....03.rar
windows7-x64
3Mercurial....03.rar
windows10-1703-x64
3Mercurial....03.rar
windows10-2004-x64
3Mercurial.exe
windows7-x64
10Mercurial.exe
windows10-1703-x64
10Mercurial.exe
windows10-2004-x64
10readme.txt
windows7-x64
1readme.txt
windows10-1703-x64
1readme.txt
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Mercurial.Grabber.v1.03.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Mercurial.Grabber.v1.03.rar
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Mercurial.Grabber.v1.03.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
Mercurial.exe
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
Mercurial.exe
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
Mercurial.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
readme.txt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
readme.txt
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
readme.txt
Resource
win10v2004-20230220-en
General
-
Target
Mercurial.Grabber.v1.03.rar
-
Size
17KB
-
MD5
287a7496b5ad62c6f5917afd8ab7a6af
-
SHA1
c1971692ddbb0046eb22fe8e724e059f868256aa
-
SHA256
d2c5ecc5035b7aa8ff41c0be7aff47ee258968b8cfed9bf466178c28f7024e45
-
SHA512
aaf6a88b63248ef885eb04b1148804b64411d53f067d50de250d91e2a9751b5e41ecf639e5b1d7a0d288346541f7be0699bd2f2c4599b1975cb5f00ffc74c611
-
SSDEEP
384:drOIdB1j/Uyri0jW3kUrvUzmmYzan7wOlwv2+ktf:drOIdBiy2wskUrvwc25wv8f
Malware Config
Extracted
mercurialgrabber
https://discord.com/api/webhooks/1086601394099851284/iwBjcoKCC9Tp1pXz4Gi46ImCEg-QPllmm6pzJ5TQSlQ4b4riC0Pg82JKtfocan6ex4PJ
Signatures
-
Mercurialgrabber family
Files
-
Mercurial.Grabber.v1.03.rar.rar
-
Mercurial.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
readme.txt