General

  • Target

    449c7895d11ece69fe68ef6e2eaf5e2a

  • Size

    41KB

  • MD5

    449c7895d11ece69fe68ef6e2eaf5e2a

  • SHA1

    11d3d7a39b7a1ceacf484b55fada97a8784a4772

  • SHA256

    e88fddeaf4334efd767d228f111aa9f80f2d05842427e70f72f5d83bb91823fb

  • SHA512

    6cc20cf3fb8db8ea0c4dcc666570cf8bc76b3bf354d07a4bd4305c72f7cdb5dfaf1ae1deb01309a6553ef54e5b203b33802c642c97449bf85f0c46003b985f7e

  • SSDEEP

    768:zscG4AAVEtj/ywMuZte7WTjIKZKfgm3Eh5q:oc5VE9Ne7WTEF7E3q

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/870122885589651478/CX0IIRLErEf-b-iYY06PZFjNWCJdGkBOXsQzZnYHQJhM1EK5ufxnvElwtLrszCsfrg2v

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 449c7895d11ece69fe68ef6e2eaf5e2a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections