Extracted

• • Target

    Boris FX Saphire AE v19.6.28.exe

  • Size

    203KB

  • MD5

    21ce2adbe9c4ce28ac6b046ab37b410b

  • SHA1

    d71ce74e347fdab8dcdafd4d23d403dbcc9c1be6

  • SHA256

    c0289e36b3d5943c54c837d7b86e8bb5438413a503def4b12924eb0cf9ebaa14

  • SHA512

    e8917c5c4b441bad9f6af5f5cc3cf31a0390972b9638785dc5e919f640b45c46e5dc5b5a13cfece1486c4d8eba82b4f7e39f445da620140694c7a0b460df91f5

  • SSDEEP

    768:S8SXYLv+qylOcnuZwLEK1TjDKZKfgm3EhBWvsl7hj6SC:vPj+q9cDLEkTfF7E/WK7hHC

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1