Overview

overview

10

Static

static

10

b5039cc570...72.exe

windows7-x64

10

b5039cc570...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5039cc570e896c5d9e438efc819ec72

  • Size

    188KB

  • MD5

    b5039cc570e896c5d9e438efc819ec72

  • SHA1

    f5ef24640bb1586ef1b71f2b6cd01cff8a8c100f

  • SHA256

    0e20df9fd5b1bc0f326efb696bed93b73ef4b6126a7ecae4feffdcaec3d81097

  • SHA512

    457068e008c4bb5ac5b24ba726fd5fc0f786477379483cdaadeef9509012cf2a30847dd2fc50161870338fb4e5a954322e7a1ccd72cc3c2fdc56aa188c775dfd

  • SSDEEP

    3072:Vac7uXG3LnTFF7ENvoHQXOEXbJBDiCLnlt98AJFJFJMJFJncESxWWWn/WWWW5Owv:VzUG3QgHQeIJB2CV8AJFJFJMJFJnVOF8

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/869302922641539082/ZCwZtf5WnHJr3H-aoCJqDcvd7GyThfO2eV-PUYVp538Tj-vhjBDdqvbHemhBKVyqxNno

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5039cc570e896c5d9e438efc819ec72
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections