General

  • Target

    KrampusCodeFixerV2.3.exe

  • Size

    45KB

  • MD5

    ac7f33c23569ae7e3ba963d6a5e55fd0

  • SHA1

    2d231e29c5b5964efa91c7d1c6364caea2fc20a3

  • SHA256

    b2a1e1a0dd89bcb9d7580e9bcf525309f5475ca79f4a616915f9c11c0603c3d8

  • SHA512

    af2ed21937313aa210284ceec3a6af05faa0cb5e6d8830bcd805af760d9a8302ac47f1337e4750de7549e58bc06c07aaec3521ca6cc3453811ed5c1f8384876a

  • SSDEEP

    768:u67M4FNqV16uH76TuZwL4JTjMKZKfgm3Eh5if:u67hq+a6PL4JT4F7Efi

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1224888260678127748/654kdgF-cPGmQsIA5MzxYpRPKCj_STQpmzXvuUzgSMyJS0teUf9eJkH6RZ56X-2tfeof

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KrampusCodeFixerV2.3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections