Resubmissions

11/11/2023, 13:32

231111-qtd1ksfh4s 10

11/11/2023, 13:31

231111-qsgp3sgg63 10

General

  • Target

    h.7z

  • Size

    686KB

  • MD5

    0d796e444257970b276be829f2033fcc

  • SHA1

    ac8a83dda820133f105f2839c10a24a2c4eaa85c

  • SHA256

    48a7493042533769ae8f5438461444e4721d67cffc52cdde9bf8cb51b5da36ab

  • SHA512

    8132913d31a127cab115d3f03c2f22f75943584afd8cc832a52f09471fe48a8de37d34f6730af6c790c1aec688239aa67cbb18c37582b71c5443258f861bc105

  • SSDEEP

    12288:3cC+vQui5rEN6ysAcR7GfuEMKHW+c0fCbVl/5UHqEbjE2d9QuRVHVvTyuQ0SS:PGQuiCN6oluEMQW+c0fUVluHqE3bdq+b

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/984263168396230666/DWJ_RK2rtVcxAh2GlY7NfTu7SQriLRe-3j65Z4y0izQOlXZo6MbPVfb-o1yds-Frpk56

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h.7z
    .7z
  • h/License.txt
  • h/ReadMe.txt
  • h/UserContent/HowToUse/1-Configuring.txt
  • h/UserContent/HowToUse/2-Troubleshooting.txt
  • h/assets/Icon.ico
  • h/assets/images/background.jpg
    .jpg
  • h/assets/images/genbutton.png
    .png
  • h/assets/images/robux.jpg
    .jpg
  • h/assets/models/r15rig.fbx
  • h/assets/sounds/error.mp3
  • h/assets/sounds/gendone.mp3
  • h/rbxgen.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • h/src/System.AppContext.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Collections.Concurrent.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Collections.Immutable.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Collections.NonGeneric.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Collections.Specialized.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Collections.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ComponentModel.EventBasedAsync.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ComponentModel.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ComponentModel.TypeConverter.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ComponentModel.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Console.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Data.Common.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.Contracts.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.Debug.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.FileVersionInfo.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.Process.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.StackTrace.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.TextWriterTraceListener.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.Tools.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.TraceSource.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Diagnostics.Tracing.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Drawing.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Dynamic.Runtime.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Globalization.Calendars.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Globalization.Extensions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Globalization.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.Compression.ZipFile.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.Compression.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.FileSystem.DriveInfo.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.FileSystem.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.FileSystem.Watcher.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.FileSystem.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.IsolatedStorage.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.MemoryMappedFiles.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.Pipes.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.UnmanagedMemoryStream.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.IO.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Linq.Expressions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Linq.Parallel.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Linq.Queryable.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Linq.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Http.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.NameResolution.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.NetworkInformation.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Ping.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Requests.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Security.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.Sockets.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.WebHeaderCollection.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.WebSockets.Client.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Net.WebSockets.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ObjectModel.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Reflection.Extensions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Reflection.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Reflection.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Resources.Reader.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Resources.ResourceManager.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Resources.Writer.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.CompilerServices.VisualC.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Extensions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Handles.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.InteropServices.RuntimeInformation.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.InteropServices.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Numerics.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Serialization.Formatters.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Serialization.Json.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Serialization.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.Serialization.Xml.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Runtime.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Claims.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Cryptography.Algorithms.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Cryptography.Csp.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Cryptography.Encoding.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Cryptography.Primitives.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Cryptography.X509Certificates.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.Principal.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Security.SecureString.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Text.Encoding.Extensions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Text.Encoding.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Text.RegularExpressions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Overlapped.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Tasks.Parallel.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Tasks.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Thread.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.ThreadPool.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.Timer.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Threading.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.ValueTuple.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.ReaderWriter.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.XDocument.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.XPath.XDocument.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.XPath.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.XmlDocument.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/System.Xml.XmlSerializer.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • h/src/WARNING.txt
  • h/version