General

  • Target

    death.exe

  • Size

    42KB

  • MD5

    a97e30b56c5c37ee6a2518f78faebc08

  • SHA1

    0d8ba0a4092a31d80d6cef6f4e340649e7d18781

  • SHA256

    4c57c9bc65e6461606380c817600cc6f3681686b36c2d0d102813de3828b92c7

  • SHA512

    b5f701d26e845ae0d7a5e36f996741f08a38676700658318eeb11de0c26b960d4925c72ca54d92d7473a75c2c419d5f5f45e8bc7ad3cebf2595d7436032f8daa

  • SSDEEP

    384:HnydBf1RAR9X278c4Oda5tKUVOQLrH7tgxLTywws/XZxIh/joJEFq5nmFcTAsUKs:wL3gOGv+ZGDuZhLccTjUKZKfgm3EhvM

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1232394495962775595/Rp8wIvsvQzT0NY5mCKbpBT_ZIY4JozltmMHzcGWbJafnSsQJ1VJ_PNkBBdUVK8UthuDr

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • death.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections