Overview

overview

10

Static

static

10

d8c97c152c...29.exe

windows7-x64

10

d8c97c152c...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8c97c152cbc98fcf34c9ad364db9129

  • Size

    42KB

  • MD5

    d8c97c152cbc98fcf34c9ad364db9129

  • SHA1

    81387577091e5e263030e30324492516b978da81

  • SHA256

    e19c7e95447bcc013e16feb6eaf8d742029b381ce973efdca100260f0636aacb

  • SHA512

    b9b0c3b7c7220fef62381658179741de56dc2eb01aa573500af3aaeab0620aef7f25ed1b7a7f248ab303ef7c5e740e1f9df10992106df88abc748e1edcecf4fc

  • SSDEEP

    768:ZFgrjbl81ydxCGIBceQ7YB/uZELP3TjmKZKfgm3Eh5p:/gxwKyBtLP3T6F7EPp

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/878381576264757248/pwCz3dsxBEJl3s7Z-yY60eO8n2-b3zFWCyvcKjp25NJsB4qrtwyL-C0QJKL7gGjH8Rlu

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d8c97c152cbc98fcf34c9ad364db9129
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections