mercurialgrabber | Mercurial[.]Grabber[.]v1[.]03[.]rar

General

Target
Mercurial.Grabber.v1.03.rar
Size 18KB
Sample240405-2f5f6aeg48
SHA256 0f22d8c34f3ecd40535fe4f88e5b05560a062e7edd97c18c673980f35d5b319f
MD5 023bd9c10c9e467197f4b3bb0ab1a5ff
SHA1 d4e96633942beb97a387d8e68b0d7e9a1858c694
SHA512 ca3827f651e18c1f5cd01d0529169ff7583002164d9d43f8f22477c4997709ed941bf480db5cf67bcd2fc3147f22217f450662b8eaa604b5b6b91d231280f1a4
SSDEEP 384:oUHU/LdPMkCZkPAP4z2ow5gELQpjmjs7HV+qoK:oU6hP+NrqELwyjs74qoK
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/969936040930451487/mf72QATeKW89Ml_jXHm5Gg0GOsTvPdWwtRq38PIRPQd6yxDgKPUPBfyhOYe2g2Z83rsM

Signatures

Mercurialgrabber family
mercurialgrabber

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mercurial Grabber.exe

File Explorer

Mercurial.Grabber.v1.03.rar

.rar 18KB
Mercurial Grabber.exe

.exe 48KB
readme.txt

64B

Mercurial.Grabber.v1.03.rar

SHA256 0f22d8c34f3ecd40535fe4f88e5b05560a062e7edd97c18c673980f35d5b319f
MD5 023bd9c10c9e467197f4b3bb0ab1a5ff
SHA1 d4e96633942beb97a387d8e68b0d7e9a1858c694
SHA512 ca3827f651e18c1f5cd01d0529169ff7583002164d9d43f8f22477c4997709ed941bf480db5cf67bcd2fc3147f22217f450662b8eaa604b5b6b91d231280f1a4
SSDEEP 384:oUHU/LdPMkCZkPAP4z2ow5gELQpjmjs7HV+qoK:oU6hP+NrqELwyjs74qoK
MD5 SHA1 SHA512 SSDEEP

Mercurial Grabber.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 496cb15b8bb0d6503b222c301c7cfbbb6d214de32b69b0cd402e6ebaeb2a3a2b
MD5 8159bc0b78ff637a9f5b20f05850a9dd
SHA1 a023262d8c60dfaac5f68798d7d9986494b6ca8c
SHA512 49d00b7ce4f46d84b2af17f5e0a886304f012ab26fcac888b7df7be5adbf61f9673d8214e2b0fae7c287302cb2948e42e82eae6ad840c90634e6a4a93d2c15c0
SSDEEP 768:3MsLsY8YVKIEomMTuZiLerxTjgKZKfgm3EhS2F:WLYVbcyLgxTsF7Ew2F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

48254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Mercurial.Grabber.v1.03.rar

Mercurial Grabber.exe

mscoree

dotnet

readme.txt

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

Mercurial.Grabber.v1.03.rar

Mercurial Grabber.exe

mscoree

dotnet

readme.txt