General

  • Target

    75ff15bf31c2bf3db65006396467f6de

  • Size

    41KB

  • MD5

    75ff15bf31c2bf3db65006396467f6de

  • SHA1

    ee6d99f18f3a2e2c3ffc627d30047ab0ac2770c0

  • SHA256

    93563f68975a858ff07f7eb91f4e0c997f0212d58b1755704d89fecd442d448f

  • SHA512

    f96b81fe1b6efe68cbb25d277ca7625bd78200345263cf12e99b6913a03bfc116169840617b952b7aa7ce39e4529d77323cdc693b6093b4d7eab5f1797f7e927

  • SSDEEP

    768:xscGoAIIr25krZ7qLwUuZieXWTj9KZKfgm3Eh6DW:OcFIr2FXeXWTRF7ECW

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/876889432370872331/UYBZw-jc429zM-xfrw9DrGQmt4Gy2sVIpOqO5qtVOQPdq0LCrFWXUvnd6ECRLDcV9RbY

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 75ff15bf31c2bf3db65006396467f6de
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections