General

  • Target

    Tiktok-ViewBot-V2.exe

  • Size

    108KB

  • MD5

    b1c63d6e778a0e0bcde22a8b7c2e8d77

  • SHA1

    ad2f4c0b5ddeec2c0d608816cb3fcaae4d0acec0

  • SHA256

    f1a87162f13f32757124f6eb270efe657e7f3a1e612ebf5f9c243f4f8668542e

  • SHA512

    c15350e1608a827263050385fe741d0439536873506d2c2b8aa8e44bcb1f1f7e1533e7f169acf5f6ed2b91bb7def0bec2dd80bdff9a9d3cc5fd382d0e9a8c967

  • SSDEEP

    1536:CLYKcbcyLV8T4F7EzPTDHSHxHHHHH9HHHHHt5b8wjOHHRHHHjHJHoHHD/vv:M18cyLyT4F7EzPTDeP/vv

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1235250283941199912/9Yk7ttCAeq66yU9zbequecplJP2FjHAM5chfXSN5hdQ-6GtoReQAV8u8A5YhrGse-PQg

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Tiktok-ViewBot-V2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections