General

  • Target

    a18640658ee904a45b946929816d1b2d

  • Size

    40KB

  • MD5

    a18640658ee904a45b946929816d1b2d

  • SHA1

    03d1cd11c7ca1f3a08f52e5b3f690c0595c16d8c

  • SHA256

    cf4010a719e6b2f9e276e50fc612790824159f4bde7fe3662944a7728c697e15

  • SHA512

    0ebb35cb4b53ff455cc0d61da28c1a6a91ca638f1c3bc32ff9e70f91311847bc5f402afefa9c15d2a5f7e72574fea451204991ff26ab3733cf3e6ded3ffbfb9c

  • SSDEEP

    768:1ZLW5EEQLB//4MeuZCLBtTjNKZKfgm3Eh6a:4EXL9DiLBtThF7EYa

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/868968873389592636/R2UcYL-vjHv4s8EkkJSlK1zLpANptsZsUIRfYfOG-lMqYFGL32UCSX8ym_SqFDlvMOWt

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a18640658ee904a45b946929816d1b2d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections