Extracted

• • Target

    wsg.exe.exe

  • Size

    41KB

  • MD5

    c43c47cfb3f6e496497ef954d8dfdbdd

  • SHA1

    4141b336d32607a90ee0003f2c4e0c0a23685c91

  • SHA256

    1207a53bc64f7b8774a19ef6039345ed51d60ff94159f0a527d8045f7aa585f1

  • SHA512

    ddec1f66c5800a88c8321f3690da62a9ae1c4e9feee6e7e02a97e86a531df8597d14297401a87447b954d6fb5302611ac73219760ce99cbf0d3d8842b9a5b78a

  • SSDEEP

    768:4EscaIiID3mbhjABWawfuZ6JewWTjwKZKfgm3EhTH:Ic1N3mt8W5ewWTkF7E9H

  Score

  10^/10

  mercurialgrabberstealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1