General

  • Target

    e9a07674a035bb2a1e4f233c41269edd_JaffaCakes118

  • Size

    42KB

  • MD5

    e9a07674a035bb2a1e4f233c41269edd

  • SHA1

    503908c418187bfc8f48533338aed01e667bf5fa

  • SHA256

    c2603d684ad273865985ea6e7ce27c9236e173d7633a72f2378a1309d9ec77ac

  • SHA512

    4eae0fd13cd2503253361f018cf886733e586174879ad06bf02bb60c25651e0af417b741083e4672dc05a822528b52aa77f7ea17678ec3d38428b0a272241215

  • SSDEEP

    768:fpIa5EMf4LB//4MouZgLL5TjoWKZKfgm3Ehdw:pE04L9D6LL5TcWF7Erw

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/882954273980284939/Oo5CKwHMkILgJiucQhx_aJyEIHFxNaStS_Rgc-0H9Qm-hz7qs9oDqPvJxh_FmBs3dflH

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9a07674a035bb2a1e4f233c41269edd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections