General

  • Target

    d3a6a6acd5feb396928e57f2b029ff2f

  • Size

    82KB

  • MD5

    d3a6a6acd5feb396928e57f2b029ff2f

  • SHA1

    7ecb062b4a6232af745cd0d528b05cd198a6dbbb

  • SHA256

    b3eba21c557da13a56a785261b7ac6ff1f5a3214862c37b12b898d6cf3b9e5c5

  • SHA512

    8a2ff14995b1783a2eb88b7f5e985bc622223fdb7f76eeabe9390a601a13188cbcb221dda3a322ffb8f0660c4e91d5b646c7fccf234bcbdc05209d2bafab33c5

  • SSDEEP

    1536:VcwBkveYWT/F7EkN4fguIFuWYjaG49dtn7ZK:mwBUe5T/F7Ew4fRIFnYjadlw

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/863041632630472715/l4-YNBHng5liJ4-fA20g3yjH25VzpLYVe65sQ2OwkF_viiV2P5xGa763qKJndTY14MEA

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3a6a6acd5feb396928e57f2b029ff2f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections