General

  • Target

    11008710cc709a74ea8b402e6f8df412

  • Size

    246KB

  • MD5

    11008710cc709a74ea8b402e6f8df412

  • SHA1

    a09988e6e1ac42c976da9c27d45ed336c175500a

  • SHA256

    2cf2722bad0157170e2f0151b40dfcacd68c599eba99f027bf7d8d7c2ea3e0d5

  • SHA512

    0e067984879aff25b24112cedabb442434fc388b793fb8cf51b1f9616d43635f416d64cfa1a3740188317c29783e89d5da7df45f9b68726041b9ea6595218fba

  • SSDEEP

    1536:5cT3mF8WmemWTdF7EKlaoTkxYSiNB+WkX:KT3waebTdF7EiaoxSiNBTq

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/878365556628160592/ZNDtjJP4DUFXKUWmAO54dtZ3vebdpKnhKuA7v3r2TXL-Uz5t0gtnQlOVMkgNw0EMVFBf

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11008710cc709a74ea8b402e6f8df412
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections