General

  • Target

    c6f1a011b83959fb953436fde64e4ff1

  • Size

    94KB

  • MD5

    c6f1a011b83959fb953436fde64e4ff1

  • SHA1

    8c864de8572c93975e3fec6be69c0adbefe1f1a9

  • SHA256

    1227ca6fb3662e062c4246a7fab2ddc137c275343450bd41273970a646451142

  • SHA512

    03268fa5ff46943cafc91c77baa8ea45517ab69d2dcf31853dfdd4543696a980481bf428bc81483a4827a335ab055f8e99ec87c22fede2bba35f6a53b201b359

  • SSDEEP

    1536:XcapFQjXeXWTqF7E5Bz2BeP/+c5p5c+lXSoaLfmT8rXwWdc5fwY:sa0eGTqF7E/z2BePz54+4ocfmIrgW2dP

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/868586628313149541/xV6Dxj6XOiyxxGpXaeG87cOuB2Pkt6ZZIIq5lgpG_uM-PJxv1SvqUH6_TRgnTNbMSciS

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6f1a011b83959fb953436fde64e4ff1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections