General

  • Target

    e4e2e0cccdc2ca304ad23def23972dbd_JaffaCakes118

  • Size

    190KB

  • MD5

    e4e2e0cccdc2ca304ad23def23972dbd

  • SHA1

    7947026fd18ddfb46ee30d6765c1bc81d6846b2c

  • SHA256

    9ce1963269efaa3e64273e20c04c215dfe781044813336fa1bdd5fe126345458

  • SHA512

    61a53b39abd64ccf3fcb875786bf5005ff334a5bf17c940c80f8998c804bf3bd544df127c053a27faa602cbf11be39e85ab3babbfef3c0ab37733e79676ca8a0

  • SSDEEP

    3072:epcG95wMLXTNF7EwYWO33VrhwkHYDKkzQ9RY6N0QuvkXdRx3uXpGj0qwQGizQQz:epcG95wM7I3v0Kkc9RXdDUXU4qwyzQuk

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/877488114191466546/FUrNh0PeCyjW3Yr_BJdodg7lzmuSvDjTsy_PMxpPmuinCJuw1BpCnGLb-rAPNYxQ9EIb

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e4e2e0cccdc2ca304ad23def23972dbd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections