Overview

overview

10

Static

static

10

4ea7899b5f...b7.exe

windows7-x64

10

4ea7899b5f...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ea7899b5f278292a79c6048cb7913b7.exe

  • Size

    41KB

  • MD5

    4ea7899b5f278292a79c6048cb7913b7

  • SHA1

    80b1c05f3a47186f8644feb2ead74dd6c57f89ed

  • SHA256

    3a6b28bb2d859580b3051d389cb7d84cc51520a1ffbd8c2fd649b17a8f094675

  • SHA512

    c7b43b2bb7e0e93d3ace2e620003e44b483a7f6c5a279247473e52664b43bd399f0da1888c162618247a016bfc160b1a233bca75b27a75610dfbfb0c8bb9e888

  • SSDEEP

    768:hscG4ApfT6ahzpDXsw+uZueHWTjEKZKfgm3EhrD:ecKfnhz0eHWT4F7E1D

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/882313436204257331/rQOP3SJFLydQ24ZSs6vtUSOg6eidE03Wz9cXc_1zYw8AxR-Gjrn4J7DpcEZmY6vfZejq

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ea7899b5f278292a79c6048cb7913b7.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections