Resubmissions

11/11/2023, 13:32

231111-qtd1ksfh4s10

11/11/2023, 13:31

231111-qsgp3sgg6310

General

  • Target
    h.7z
  • Size 686KB
  • Sample231111-qsgp3sgg63
  • SHA256 48a7493042533769ae8f5438461444e4721d67cffc52cdde9bf8cb51b5da36ab
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • mercurialgrabber

C2
  • https://discord.com/api/webhooks/984263168396230666/DWJ_RK2rtVcxAh2GlY7NfTu7SQriLRe-3j65Z4y0izQOlXZo6MbPVfb-o1yds-Frpk56

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • h.7z
    .7z 686KB
  • h/License.txt
    186B
  • h/ReadMe.txt
    573B
  • h/UserContent/HowToUse/1-Configuring.txt
    695B
  • h/UserContent/HowToUse/2-Troubleshooting.txt
    642B
  • h/assets/Icon.ico
    88KB
  • h/assets/images/background.jpg
    .jpg 15KB
  • h/assets/images/genbutton.png
    .png 2KB
  • h/assets/images/robux.jpg
    .jpg 21KB
  • h/assets/models/r15rig.fbx
    334KB
  • h/assets/sounds/error.mp3
    18KB
  • h/assets/sounds/gendone.mp3
    28KB
  • h/rbxgen.exe
    .exe 131KB
  • h/src/System.AppContext.dll
    .dll 20KB
  • h/src/System.Collections.Concurrent.dll
    .dll 20KB
  • h/src/System.Collections.Immutable.dll
    .dll 176KB
  • h/src/System.Collections.NonGeneric.dll
    .dll 20KB
  • h/src/System.Collections.Specialized.dll
    .dll 20KB
  • h/src/System.Collections.dll
    .dll 21KB
  • h/src/System.ComponentModel.EventBasedAsync.dll
    .dll 21KB
  • h/src/System.ComponentModel.Primitives.dll
    .dll 21KB
  • h/src/System.ComponentModel.TypeConverter.dll
    .dll 22KB
  • h/src/System.ComponentModel.dll
    .dll 20KB
  • h/src/System.Console.dll
    .dll 20KB
  • h/src/System.Data.Common.dll
    .dll 150KB
  • h/src/System.Diagnostics.Contracts.dll
    .dll 21KB
  • h/src/System.Diagnostics.Debug.dll
    .dll 20KB
  • h/src/System.Diagnostics.FileVersionInfo.dll
    .dll 20KB
  • h/src/System.Diagnostics.Process.dll
    .dll 21KB
  • h/src/System.Diagnostics.StackTrace.dll
    .dll 23KB
  • h/src/System.Diagnostics.TextWriterTraceListener.dll
    .dll 20KB
  • h/src/System.Diagnostics.Tools.dll
    .dll 20KB
  • h/src/System.Diagnostics.TraceSource.dll
    .dll 21KB
  • h/src/System.Diagnostics.Tracing.dll
    .dll 30KB
  • h/src/System.Drawing.Primitives.dll
    .dll 20KB
  • h/src/System.Dynamic.Runtime.dll
    .dll 21KB
  • h/src/System.Globalization.Calendars.dll
    .dll 21KB
  • h/src/System.Globalization.Extensions.dll
    .dll 25KB
  • h/src/System.Globalization.dll
    .dll 20KB
  • h/src/System.IO.Compression.ZipFile.dll
    .dll 20KB
  • h/src/System.IO.Compression.dll
    .dll 108KB
  • h/src/System.IO.FileSystem.DriveInfo.dll
    .dll 20KB
  • h/src/System.IO.FileSystem.Primitives.dll
    .dll 20KB
  • h/src/System.IO.FileSystem.Watcher.dll
    .dll 20KB
  • h/src/System.IO.FileSystem.dll
    .dll 20KB
  • h/src/System.IO.IsolatedStorage.dll
    .dll 20KB
  • h/src/System.IO.MemoryMappedFiles.dll
    .dll 20KB
  • h/src/System.IO.Pipes.dll
    .dll 20KB
  • h/src/System.IO.UnmanagedMemoryStream.dll
    .dll 20KB
  • h/src/System.IO.dll
    .dll 20KB
  • h/src/System.Linq.Expressions.dll
    .dll 21KB
  • h/src/System.Linq.Parallel.dll
    .dll 20KB
  • h/src/System.Linq.Queryable.dll
    .dll 20KB
  • h/src/System.Linq.dll
    .dll 20KB
  • h/src/System.Net.Http.dll
    .dll 193KB
  • h/src/System.Net.NameResolution.dll
    .dll 20KB
  • h/src/System.Net.NetworkInformation.dll
    .dll 21KB
  • h/src/System.Net.Ping.dll
    .dll 20KB
  • h/src/System.Net.Primitives.dll
    .dll 21KB
  • h/src/System.Net.Requests.dll
    .dll 20KB
  • h/src/System.Net.Security.dll
    .dll 21KB
  • h/src/System.Net.Sockets.dll
    .dll 29KB
  • h/src/System.Net.WebHeaderCollection.dll
    .dll 20KB
  • h/src/System.Net.WebSockets.Client.dll
    .dll 20KB
  • h/src/System.Net.WebSockets.dll
    .dll 20KB
  • h/src/System.ObjectModel.dll
    .dll 21KB
  • h/src/System.Reflection.Extensions.dll
    .dll 20KB
  • h/src/System.Reflection.Primitives.dll
    .dll 21KB
  • h/src/System.Reflection.dll
    .dll 21KB
  • h/src/System.Resources.Reader.dll
    .dll 20KB
  • h/src/System.Resources.ResourceManager.dll
    .dll 20KB
  • h/src/System.Resources.Writer.dll
    .dll 20KB
  • h/src/System.Runtime.CompilerServices.Unsafe.dll
    .dll 16KB
  • h/src/System.Runtime.CompilerServices.VisualC.dll
    .dll 21KB
  • h/src/System.Runtime.Extensions.dll
    .dll 21KB
  • h/src/System.Runtime.Handles.dll
    .dll 20KB
  • h/src/System.Runtime.InteropServices.RuntimeInformation.dll
    .dll 27KB
  • h/src/System.Runtime.InteropServices.dll
    .dll 23KB
  • h/src/System.Runtime.Numerics.dll
    .dll 20KB
  • h/src/System.Runtime.Serialization.Formatters.dll
    .dll 20KB
  • h/src/System.Runtime.Serialization.Json.dll
    .dll 20KB
  • h/src/System.Runtime.Serialization.Primitives.dll
    .dll 26KB
  • h/src/System.Runtime.Serialization.Xml.dll
    .dll 24KB
  • h/src/System.Runtime.dll
    .dll 28KB
  • h/src/System.Security.Claims.dll
    .dll 20KB
  • h/src/System.Security.Cryptography.Algorithms.dll
    .dll 45KB
  • h/src/System.Security.Cryptography.Csp.dll
    .dll 20KB
  • h/src/System.Security.Cryptography.Encoding.dll
    .dll 20KB
  • h/src/System.Security.Cryptography.Primitives.dll
    .dll 21KB
  • h/src/System.Security.Cryptography.X509Certificates.dll
    .dll 22KB
  • h/src/System.Security.Principal.dll
    .dll 20KB
  • h/src/System.Security.SecureString.dll
    .dll 21KB
  • h/src/System.Text.Encoding.Extensions.dll
    .dll 20KB
  • h/src/System.Text.Encoding.dll
    .dll 21KB
  • h/src/System.Text.RegularExpressions.dll
    .dll 20KB
  • h/src/System.Threading.Overlapped.dll
    .dll 36KB
  • h/src/System.Threading.Tasks.Extensions.dll
    .dll 32KB
  • h/src/System.Threading.Tasks.Parallel.dll
    .dll 20KB
  • h/src/System.Threading.Tasks.dll
    .dll 21KB
  • h/src/System.Threading.Thread.dll
    .dll 20KB
  • h/src/System.Threading.ThreadPool.dll
    .dll 20KB
  • h/src/System.Threading.Timer.dll
    .dll 20KB
  • h/src/System.Threading.dll
    .dll 21KB
  • h/src/System.ValueTuple.dll
    .dll 77KB
  • h/src/System.Xml.ReaderWriter.dll
    .dll 21KB
  • h/src/System.Xml.XDocument.dll
    .dll 21KB
  • h/src/System.Xml.XPath.XDocument.dll
    .dll 22KB
  • h/src/System.Xml.XPath.dll
    .dll 20KB
  • h/src/System.Xml.XmlDocument.dll
    .dll 21KB
  • h/src/System.Xml.XmlSerializer.dll
    .dll 21KB
  • h/src/WARNING.txt
    181B
  • h/version
    5B

h.7z

  • SHA256 48a7493042533769ae8f5438461444e4721d67cffc52cdde9bf8cb51b5da36ab
  • MD5 SHA1 SHA512 SSDEEP