General

  • Target

    bd4ff54109265b066ce317359fb34291

  • Size

    46KB

  • MD5

    bd4ff54109265b066ce317359fb34291

  • SHA1

    3f2d4e7e438b289fe26f702891fb0b27d77d6206

  • SHA256

    cdb225bf9fab15e0da4c6ef0bde9c3c4da253e550daf3701ca37de01c375137b

  • SHA512

    8354128cc45d8556566c09a4e4ac96cb19562922bd19e60d6a6eb1e8b98c9592cc66ce29da206b9463b1411224cf06225dddd8f7023c4bf1c9c3ecfc10550f3d

  • SSDEEP

    768:WRR/vW6qLhY8Yh7omMBuZoLrB8TjxKZKfgm3EhTAAKrlUI:WH/O6ALYp+LV8T9F7EhA7

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/877654937629245530/_NPn4dc9lYtPFjYq7L8cDS0JImKZLYl8cGrfTpuYoOtcrOyBFr_Kcszk73ZTQrVFTIvj

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd4ff54109265b066ce317359fb34291
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections