General

  • Target

    178ee7ee223329c599e74ab8fbb4dadf

  • Size

    44KB

  • MD5

    178ee7ee223329c599e74ab8fbb4dadf

  • SHA1

    0eade7997946fcd1e8a4e583b3522f6a518d4eef

  • SHA256

    e11880a04eb88f49e4f41092c4382336f13177d89b90cb076a34e27b1273eeba

  • SHA512

    a7af70fdcf08ee1fc870bded335244cead29047117ac6c581314a0bc9e0459c1b7789149fea6c1815c334b823b5f3bbf5d08deffa28a394a660f24f63e829de6

  • SSDEEP

    768:aAMF9oxsedD7EPJuI7nrKbTjCFdGf0WBREhXplgFQg5P:yuD7UWT2UnEzlgFrB

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/871668035059073075/gkmIXl2NU_rT1vGbQX1zC-alguEAhJZVJmZKizfBc2ysB15ICEsvWBKk44NCrI_uIByT

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 178ee7ee223329c599e74ab8fbb4dadf
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections