General

  • Target

    0f243aa3dcd8c33124e3fa9d3d12c343_JaffaCakes118

  • Size

    41KB

  • MD5

    0f243aa3dcd8c33124e3fa9d3d12c343

  • SHA1

    7ae66af8676fc184ae800a5c6f46ce3943655fa1

  • SHA256

    f514711a78d01f9701310ae3ef72d7dcd78518a4ef355079349c6d3ce7d1cf39

  • SHA512

    eee55390d27109d434f92e3f4c719a30920f0d843ceb36eedde29744fdfbe5e4c97472901da626f9d5d4ea8a5f6405e54ddb32bc6e70f4dfbc023786addc0606

  • SSDEEP

    768:0scG4ApfT6ahzpDXswIuZkeNWTj0KZKfgm3Ehkl:bcKfnhz8eNWTIF7EWl

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/897139619336966215/JnDh4Q-lR3UDGzcnqgYR7VieyLoWfMVkVYrFGteFEdlA3kcMpCdb5ozh-U8qJs12EkbS

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f243aa3dcd8c33124e3fa9d3d12c343_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections