General

  • Target
    https://github.com/hexmkII/blackboy
  • Sample240210-rf7amscg71

Malware Config

Extracted

Family
  • mercurialgrabber

C2
  • https://discord.com/api/webhooks/979623016109592586/yRLMt13n-TqMWlzjSYYKyCvJj6Inxk8TMsoErgm5s_ZhQrQg3m5-GxlOHqSY4857IJpy

Targets

    • Target
      https://github.com/hexmkII/blackboy
    • Mercurial Grabber Stealer

      Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks