Overview

overview

10

Static

static

10

czity.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    czity.exe

  • Size

    41KB

  • MD5

    f9787bb996642a620760f0344fc31cd1

  • SHA1

    e6b2baf658c3cd15b2d31e589bd09d1a768ad74a

  • SHA256

    932448e541f2105f522ae63d97d739f735252d627582f31fcd4de6552f1dba88

  • SHA512

    bab3790c428e855f20e6eb61121caa1f523eec57f5e26ef236d8aefff556c02396e9217e06ae097df15474955383e60da0b083bb8eaeabaa4357bfdc1a923b79

  • SSDEEP

    768:hscaIiIEI/gB1wtpuZce/WTj+KZKfgm3Ehzb:ec1yYgB0e/WTKF7Exb

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1221240997686542346/qOnbevQy2Ik14F7G1ihxYnFdeQ2Ac25ZyEfiNBV82LbwwYXuk1Bjseg1Wr8GUOBOZ29B

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • czity.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections