General

  • Target

    phasmophobia.exe

  • Size

    41KB

  • MD5

    13ae295c93eaa000b59487b965371a22

  • SHA1

    7b8d0ffbc829308c7a00983eec9a58518f88ab0f

  • SHA256

    3041d2d0a12a0132944a2b1095dd464dcf66155c2937c232a2e08ab49af53fd7

  • SHA512

    879ed0b42b53c94f0e924d544748ed346c0673731d5ce5a7a385605a916112f0e094036cfec28d3213e62591838469bcdc75450f0824fcaab484be6204667c29

  • SSDEEP

    768:4scaIiIqfT6aGpDXswguZkeqWTj8iKZKfgm3EhEB:fc1ofnGEeqWTAiF7EGB

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1226190742091862016/FevJ3EY4nZ8U17E0aVVzH2pP-KRB_T9LcZ5HPJ-cza7zSyGVola9JNKI1ocBWhpHwxy8

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • phasmophobia.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections