General

  • Target

    d50e6b03eadcf723526e7553ecc8a330

  • Size

    42KB

  • MD5

    d50e6b03eadcf723526e7553ecc8a330

  • SHA1

    63887c4ccae831856040b02cf45033b523ea68ef

  • SHA256

    84eb2c63dd363a740147908e0926d40eba7bbde57ee54759e43c667f6a1553dc

  • SHA512

    76527773be283c7dc81ffea60fd632c68246d904c6c7b8ad22ca43bdffc5823e04f095c3b13ec844e097f804d940a64e576530b114df1c3b2da204b2caffdcf4

  • SSDEEP

    768:fqQ14KKqqI28Tj6rZDouZPLniTj4KZKfgm3Eh2W:S3NqH28TjQxLniTkF7EAW

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/875852675625910323/FZwPwtdHbLxfj83p3-xABK2PUL5UBlzHAHTw2lI2EK2mMFQEL_hHmyfy79QNMGnmavcJ

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d50e6b03eadcf723526e7553ecc8a330
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections