Extracted

• • Target

    death.exe

  • Size

    42KB

  • MD5

    a97e30b56c5c37ee6a2518f78faebc08

  • SHA1

    0d8ba0a4092a31d80d6cef6f4e340649e7d18781

  • SHA256

    4c57c9bc65e6461606380c817600cc6f3681686b36c2d0d102813de3828b92c7

  • SHA512

    b5f701d26e845ae0d7a5e36f996741f08a38676700658318eeb11de0c26b960d4925c72ca54d92d7473a75c2c419d5f5f45e8bc7ad3cebf2595d7436032f8daa

  • SSDEEP

    384:HnydBf1RAR9X278c4Oda5tKUVOQLrH7tgxLTywws/XZxIh/joJEFq5nmFcTAsUKs:wL3gOGv+ZGDuZhLccTjUKZKfgm3EhvM

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1