General

  • Target

    output.exe

  • Size

    41KB

  • MD5

    78ca27aad1a5e243b1fcba438f643027

  • SHA1

    0752a7bf402f8a769f19acfe21a852f0fe26ae47

  • SHA256

    01e196bad65ee602373aba85275f8bef07fea2952e2ffd8605e19a813ed1fffb

  • SHA512

    86433b9fcd1b02da25c275bd45ff67a01f33c9af2ef4d1fda2e4a8f3147cb153b4bcd816b882d14cd8fea2207bda10922cf47bd27397346ad67cd93c627787e5

  • SSDEEP

    768:TscaIyIqfT6aikXpDXswouZkeNWTjHKZKfgm3Eh95:Ic1YfnikXceNWTLF7Ev5

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1210812787249512478/0hj5cKBCNShtRr0Vl9uJl-e62SxGadmj2c2BPT3MjA1kfPy-GZ4kOZFSE9g8J2rjkru5

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • output.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections