Overview

overview

10

Static

static

10

374b68ede9...12.exe

windows7-x64

10

374b68ede9...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    374b68ede9a1ef2246a55a35a7df5912

  • Size

    42KB

  • MD5

    374b68ede9a1ef2246a55a35a7df5912

  • SHA1

    597472d0bd297b33fcbf22daf179272e82560860

  • SHA256

    b3917aec074a83d4f409fc0bfb65f1c2a0314dc3fc3406875d158feec0176ea2

  • SHA512

    7aa577024f8f1c5db6823a539d820b67412c649acd23c65078c8c89c34e41143cbf004ed8e686b5a57fde76fdd77dcbff8db668038d12329fd42bde9423a45eb

  • SSDEEP

    768:PP5hEp9VbaxjylJQ0uZwLvcTjRKZKfgm3Ehwv:PP5LxjyoiLvcTVF7ESv

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://canary.discord.com/api/webhooks/875428357821587498/NNV1L4IvDM1VWIGA3GN2BO95Tz-MuUikiViD7QuUUG2jKo2wCtTBsp36bRYZTytjHlsM

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 374b68ede9a1ef2246a55a35a7df5912
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections