General

  • Target

    FreeAccsWithRobux.exe

  • Size

    42KB

  • MD5

    56adb3d844d2e1436afcc6a70d3ffc9e

  • SHA1

    05979ce27c95352374d2c8d2ef4a48adcfe3c2b1

  • SHA256

    0a0364341a4a63763b18b07ba41f2db7d341270fc185ec104e20935aaf66bef1

  • SHA512

    78da9c6669974f6b4160af9274758fe2fa9cb49b76abc29c1c0e6048806ce09e9196e4da1dd3c75d993f992261245e8f287444bacc413fb88a61ff1a9eac0729

  • SSDEEP

    768:PLzHY8YKcKIEomMkuZ5LZdTjSKZKfgm3EhIv:PHLYKcbcmLZdTWF7E6v

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/967818087334305842/HQwsR1nOaR_M-kbZ2mfX1otgcceaVRWUUdKr2xUtEeIf-WxnePA7h-WU2DPpoE8ep8lk

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FreeAccsWithRobux.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections