Overview

overview

10

Static

static

10

c914a379fe...fa.exe

windows7-x64

10

c914a379fe...fa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c914a379fec7efc0f846305ad30f95fa

  • Size

    42KB

  • MD5

    c914a379fec7efc0f846305ad30f95fa

  • SHA1

    3b8efaa372936b7eb28e091d8e8a714472a56f7a

  • SHA256

    d06cdd85b68169294b262454c44d8ec6efde0a151c11059f9847fa4096e08094

  • SHA512

    50c89e5f4f2e5cbc1666bb89e922c79ae9e52d9233c5cca4237aef526bf0d16b4d2fea5c3c24006837909561436e964eaaa0e8bff774b46e2803158884d4a36b

  • SSDEEP

    768:tOE7I14lMmDkmpSuZbLnJTjbKZKfgm3EhMu:Y1ALpXLnJTfF7E6u

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/881217298298454056/w4wI3aOwOdpGYVfzI-WhKjP3CPRP8QAoAas5DaZMD1EZ-40i5h48pGjKsoWTZmO4KB_l

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c914a379fec7efc0f846305ad30f95fa
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections