Extracted

• • Target

    b5039cc570e896c5d9e438efc819ec72

  • Size

    188KB

  • MD5

    b5039cc570e896c5d9e438efc819ec72

  • SHA1

    f5ef24640bb1586ef1b71f2b6cd01cff8a8c100f

  • SHA256

    0e20df9fd5b1bc0f326efb696bed93b73ef4b6126a7ecae4feffdcaec3d81097

  • SHA512

    457068e008c4bb5ac5b24ba726fd5fc0f786477379483cdaadeef9509012cf2a30847dd2fc50161870338fb4e5a954322e7a1ccd72cc3c2fdc56aa188c775dfd

  • SSDEEP

    3072:Vac7uXG3LnTFF7ENvoHQXOEXbJBDiCLnlt98AJFJFJMJFJncESxWWWn/WWWW5Owv:VzUG3QgHQeIJB2CV8AJFJFJMJFJnVOF8

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2